A helpful resource is the Administration Guide of PAM:
https://www.netiq.com/documentation/privileged-account-manager-3/npam_admin/data/bookinfo.html

You'll want to first create the LDAP Account for AD in the Enterprise Credential Vault:
https://www.netiq.com/documentation/privileged-account-manager-3/npam_admin/data/brxvkf6.html#brxaxxa

Then to configure this Account Domain to be used as the default Authentication Domain within PAM, see Configuring Account Settings > Authentication Domain within the Framework User Manager Console:
https://www.netiq.com/documentation/privileged-account-manager-3/npam_admin/data/user_account_settings.html#bjflv4n

This should permit login as you have described.

--

After adding AD LDAP as an Account Domain and set it as the default Authentication Domain, then you'll be considering Privileged Account Management for Windows:
https://www.netiq.com/documentation/privileged-account-manager-3/npam_admin/data/pam_windows.html

During the "Workflow to Configure Privileged Session for Windows" steps, when creating the User Group, it's also possible to configure an LDAP Group Lookup to reference an external LDAP Group located in AD:
https://www.netiq.com/documentation/privileged-account-manager-3/npam_admin/data/brxvkf6.html

A helpful resource is the Administration Guide of PAM:
https://www.netiq.com/documentation/privileged-account-manager-3/npam_admin/data/bookinfo.html

You'll want to first create the LDAP Account for AD in the Enterprise Credential Vault:
https://www.netiq.com/documentation/privileged-account-manager-3/npam_admin/data/brxvkf6.html#brxaxxa

Then to configure this Account Domain to be used as the default Authentication Domain within PAM, see Configuring Account Settings > Authentication Domain within the Framework User Manager Console:
https://www.netiq.com/documentation/privileged-account-manager-3/npam_admin/data/user_account_settings.html#bjflv4n

This should permit login as you have described.

--

After adding AD LDAP as an Account Domain and set it as the default Authentication Domain, then you'll be considering Privileged Account Management for Windows:
https://www.netiq.com/documentation/privileged-account-manager-3/npam_admin/data/pam_windows.html

During the "Workflow to Configure Privileged Session for Windows" steps, when creating the User Group, it's also possible to configure an LDAP Group Lookup to reference an external LDAP Group located in AD:
https://www.netiq.com/documentation/privileged-account-manager-3/npam_admin/data/brxvkf6.html

A helpful resource is the Administration Guide of PAM:
https://www.netiq.com/documentation/privileged-account-manager-3/npam_admin/data/bookinfo.html

You'll want to first create the LDAP Account for AD in the Enterprise Credential Vault:
https://www.netiq.com/documentation/privileged-account-manager-3/npam_admin/data/brxvkf6.html#brxaxxa

Then to configure this Account Domain to be used as the default Authentication Domain within PAM, see Configuring Account Settings > Authentication Domain within the Framework User Manager Console:
https://www.netiq.com/documentation/privileged-account-manager-3/npam_admin/data/user_account_settings.html#bjflv4n

This should permit login as you have described.

--

After adding AD LDAP as an Account Domain and set it as the default Authentication Domain, then you'll be considering Privileged Account Management for Windows:
https://www.netiq.com/documentation/privileged-account-manager-3/npam_admin/data/pam_windows.html

During the "Workflow to Configure Privileged Session for Windows" steps, when creating the User Group, it's also possible to configure an LDAP Group Lookup to reference an external LDAP Group located in AD:
https://www.netiq.com/documentation/privileged-account-manager-3/npam_admin/data/brxvkf6.html