We are moving from ZFD with Applications associated to containers and groups to ZCM. AD will become our user source. Best Practice should I use AD groups or containers to apply relationships or Bundle Groups and associate users to Bundle Groups?