We have in /etc/pve/user.cfg
user:mistert@DIR.LOCAL:1:0::::::
user:mistern@DIR.LOCAL:1:0::::::
user:root@pam:1:0::::::
group:ADUser:mistert@DIR.LOCAL,mistern@DIR.LOCAL::
acl:1:/:@ADUser:Administrator:
And in /etc/pve/domain.cfg
ad: DIR.LOCAL
domain dir.local
server1...