When AD group, for example LinuxTeam, contains another group(s), for example OtherGroup, does /etc/pve/user.cfg contains groups on group line?
I see only group lines like this
group:LinuxTeam:user1@domain,user2@domain
without any groups - should it look like this...