When you are using a system integrated with Active Directory, many aspects of users can and must be managed from within Active Directory.
Some information, specifically:
- Financial Approval Limit
- Group Memberships (E.g. who is an Administrator)
Must be managed within the platform, as there is no standard way to manage this in AD.