I  worked on Active Directory in my some recent assignments and  requirements were something like: Identify current user. Get current user’s groups. Get all users of a group.