Specifies the role that a user authenticated via Active Directory should have. Setting this property to legacy roles of 'Administrator' or 'Operator', or any of the individual role IDs of 'a', 'u', 'c', 'r', 'o' and 's' will cause the Active Directory client to ignore the schema stored on the AD server. Setting this to 'none' clears the value and indicates that the native Active Directory schema should be used. The role IDs can be joined together 'aucros' where a-admin, u-user, c-console, r-reset, s-service and o-readOnly.