User access question

Hi - This must be easy, but I can't figure it out - any help would be appreciated.

 

 

Scenario

 

 

I have master group 1 set up to authenticate to RSA Radius using AD account information and master group 1 is set up to allocate resource group 1 applications - this is fine.

 

 

My Problem

 

 

How can I create a master group 2 and set it up for resource froup 2 for users in a different active directory group from master group 1

 

 

My problem is that I have two master groups and two resource groups and they are allocating the same applications since Firepass can't tell the difference between the users who are logging into the device.....

 

 

Hope that was clear enough...

 

 

thanks

 

 

rod