When we onboarded Aveksa, the professional services vendor set up Active Directory as an application, rather than as a directory. It's not our source of truth for users, so it hasn't been an issue. But now we're looking to implement Data Access and Governance, and DAG seems to need AD as a directory. Is that correct, or will DAG work with AD as an application? What are the benefits and drawbacks of collecting AD as a diretory versus an application (or both)?