Map groups to roles

Create some sort of data structure in the admin collection that maps LDAP groups for a user (stored in the SystemRoles of the user model) to roles (roles collection). Also create an API to update/create a role mapping