Admin-curated mappings from a human-readable name to the underlying Authentik and/or AD group(s) that provide it.