I found out that it is only possible for FDMEE to create native groups for location security.
However, Active Directory groups can be added as members of the native groups. This way, users only need be added to the Active Directory groups. The only maintenance is to add or remove the active directory groups to or from the FDMEE native groups.
Good idea! Thanks for sharing.