AD Database Hybrid
Add an additional authentication profile to fetch the user list from Active Directory, but store all role information in a database. This authentication profile stores users, roles, and mappings in the database similar to the Database Authentication profile, but validates against passwords stored in Active Directory.
AD/Database User Source
The active directory/database hybrid profile type is a combination of the active directory User Source and the database (manual mode) User Source. This means that for any username/password combination, active directory gets to decide whether that user is a valid user, and if they are considered valid, then the other information for that user (roles, contact info, and so on) are retrieved from an external database connection.
Just like the AD/Internal User Source, this is very handy for projects that are required to integrate with IT's centrally managed security, but negotiating the management of roles with IT would be too cumbersome. This User Source is not manageable from within Ignition. Users/passwords must be administered through active directory, and roles, contact info, and so on, must be administered directly through the database.