We find it very expensive to manage user/group permissions from Active Directory for multiple ArcGIS deployements (10+) with the Portal for ArcGIS on multiple places.
Could you please create something like a common site configuration that stores the security settings from AGS, Portal and Active Directory?
Regards,
Dejan
---
www.mapdegree.com