ARS 7.2 - can the web interface be managed by groups?

Question

i.e. In our previous install we only used the ARWebAdmin WI for both our Admins and Helpdesk and controlled access through group memberships. The old server, version 6.9, is still functioning so if someone can tell me where this would have been configured so I can compare and duplicate the settings on our new servers I'd appreciate it. 
 We did import the current configuration to the new version and our modified templates came over. Now our helpdesk users can see and use the CONFIGURATION menu option on the WI and I can't find the spot to make my changes. 
 Any help will be appreciated. 
 leed

Aidar.Karabalaev · Answer

not sure about the questions. 
#1. Access Templates (AT) is the right way to control access to AD in ARS via AD\groups (virtaul permissions/roles) 
#2. ARS WI layout allows to be configured in general, or per OU (scope) and other ldap criteria. It is *layout* and should not be confused and used as #1. *permissions*. 
#3. Separate Websites http://ARSADMins , http://ARSHelpDesk - very common practice, when website configuration customized per website dedicated to AD\group (AD\HelpDesk is denied to access http://ARADMins on IIS/website level)