You can use a AD Security Group to grant access to the portal but is
there then a way to include that group in an audience? It appears
that you need to grant individuals access to the portal and then
those individual accounts can be included in an audience using group
membership or some other AD attribute. Is this correct or is there
something I'm missing?