If a user needs access to the content server, once approved, the standard AD group that can be given is Content Server Users in Active Directory.