AD Group Checking with RADIUS Attribute Mapping

I think it is the top level node in the details node.
If there are ever other details (there are) but probably you only need dir=user.