Satellite 6 with Active Directory - Permissions

Hi,

There is a very detailed guide on integrating Red Hat Satellite 6 with Active Directory at

Red Hat Satellite 6.1 User Guide - Using Active Directory Directly

Once complete, the guide states "By completing the above procedure you allow users that belong to the EXAMPLE.ORG realm to log in to the Satellite server".

In my instance, I only want a subset of users in AD to be able to login to Satellite. What's the best way of restricting access to a set of users or AD groups?

Many thanks,

Richard.