[ovirt-users] change from LDAP to AD authentication

Hello, as part of our policy I have to change from LDAP to Active Directory for authentication in our oVirt system. I have managed to configure a test system that allows users to login using the CN (sAMAccountName) as before. The users in the system using the AD namespace are using their UPN for their user name. Do we have to copy permissions from all the old accounts to their new accounts or is there a way to rename them to the UPN retaining there old permissions? Thanks, Paul S.