How to limit AD groups when using custom RoleProvider

[klompie]

I'm developing my own Custom RoleProvider inheriting from \[code\]WindowsTokenRoleProvider\[/code\].Is it possible to limit/restrict the AD groups somewhere (web.config?) so that when I use \[code\]GetRolesForUser\[/code\], it doesn't return soooo many groups most of which I don't need? I am assuming that I CANNOT use:\[code\] <authorization> <allow roles="AU\myADGroup" /> <deny users="?"/> </authorization>\[/code\]because I am now using custom RoleProvider?