Is there a way to query nested groups in AD using the Active Directory Service? For example, we have countries AD groups (US, Canada), then we have user role AD groups within these countries (Managers, Workers).  A person may be a worker in one country and a manager in another.  Is there way to build a smart object using the AD service ...