When configuring an authorization policy, an administrator cannot see specific Active Directory groups present in their domain to be used as a policy condition....

When configuring an authorization policy, an administrator cannot see specific Active Directory groups present in their domain to be used as a policy condition.However, other groups that are in the same domain are seen.What is causing this issue?

A. Cisco ISE's connection to the AD join point is failing. B. Cisco ISE only sees the built-in groups, not user created ones. C. The groups are not added to Cisco ISE under the AD join point. D. The groups are present but need to be manually typed as conditions.