OBIEE - users from AD but only from few specific groups

Question

I want have in my OBIEE users from AD, but only members of few specific groups (where prefix group is OBIEE - e.g. OBIEE_DEV, OBIEE_PRD, OBIEE_RAP).

I tried in WebLog