Since users in a domain cannot login to a domain computer without the proper credentials, it would be very nice to have an Ignition client that uses AD security automatically log a user into the client, assuming they have the appropriate role for that client. I have written a C# application for our company that does this, and uses a similar role-based permissions schema. When a user opens the application on their computer, it automatically logs them in and sets their permissions based on their username. They love not having to log into the app every time they open it.