AD user groups and URL filtering

Hello guys,

We have URL filtering enabled on our fortigate, with specific user subnets having different URL filtering policies. These users have statically assigned IPs. 

But we now want to switch to dynamic addressing and using AD to group users. How do i integrate the AD to our fortigate and configure URL policies based on the groups defined in the AD

Thanks.