Correct Syntax for AD authentcation

As per Ad authentication
Replace ad-admingroup with your Active Directory admin-user group and ad-usergroup with your standard user group. It is highly suggested to create a bind user, otherwise “remember me”, alerting users, and the API will not work.

It says replace ad-admingroup with your Ad group.
I have IT-Local-Admin Ad group.

What the correct syntax?

lnms config:set auth_ad_groups.IT-Local-Admin [“admin”]

or

lnms config:set auth_ad_groups.IT-Local-Admin.roles [“admin”]

Might be easier to set it like this:

lnms config:set auth_ad_groups '{"IT-Local-Admin": {roles: ["admin"]}}'

(this will delete all other groups because it sets the entire thing at once)

Also, if you use the webui to set this setting, it takes care of all of that for you.