FSSO and AD sub groups

Hi all,

    When configure FSSO is there some problem if a user is not directly associated a that group of AD that is associated a Fortigate Group.  It can pertence a sub group?

   For ex:

  User1 is associated with group STAFF of AD.

  group STAFF is inside group INTERNET-PROFILE1 of AD.

  group INTERNET-PROFILE1 of AD is associated with FG-INTERNET-PROFILE1 of Fortigate.

  Is there some problem if the User1 is in sub-group (STAFF) and not directly on INTERNET-PROFILE1?

Thanks !!!!

Claudio