It's gonna help but: 
Affter agent auth i need to asign role to agents according AD Group Membership...
and there is something about 15 agent roles...

--