ACS 5.2 Identity groups - restrict device access

[mflanigan]

I have ACS 5.2 running as a VM.  I'm AD, then local authentication successfully for device access, but I want to define ACS user groups to restrict login.

I don;t see any way to do this.  If I use AD groups, they don;t show up as selection options on the policy screens, just the ACS locallyy defined groups.  I know this can be done, any sugestions?

Thanks

[mflanigan]

Found my own problem - the default behavior was incorrect.