public void setGroupRolesMap(Map<String, String> groupRolesMap) {
        this.groupRolesMap = groupRolesMap;
    }
Mapping from fully qualified active directory
group names (e.g. CN=Group,OU=Company,DC=MyDomain,DC=local)
as returned by the active directory LDAP server to role names.
core/src/main/java/org/apache/shiro/realm/activedirectory/ActiveDirectoryRealm.java