Active Directory, Shared Services, Planning Question

Hello all,

We are using the planning application with shared services configured to assign permissions for authentication and authorization by having native groups have active directory group members. This way we are able to provision access using active directory and should access need to be changed that would be done in one place under the native directory groups which would then apply for both Active Directory users and native users. Since I am in the process of having one of the planning applications decommissioned I need to remove the Active Directory groups and was told by the people managing our system that