We want to use AD Group to manage user permissions in Condeco (Global Administrator, Country Administrator,
Location Administrator, Group Administrator).

First you need to make these permissions manageable by group, not by user. Following this, you should allow the matching of this group with AD group. The consequence would be to sync AD Group with HR Feed