I have a need to provision an AD group with a basic Account-level,  Destination-level and Connector-level role directly.  Please consider this feature request.