How are Active Directory Security Groups mapped to internal roles?

In Administration > RBAC Settings, administrators map specific AD security groups (e.g., SG_Wireless_Techs) to a Functional Role (e.g., Engineer) and an Object Scope (e.g., Microwave_Backhaul_Collection).