When trying to add an AD group to a Console Role the correct AD group name was entered into the search field but the group was not found. Some AD groups were found, but many were missing.
解决办法
The groups that were not showing up were found to be "domain local" groups. After they were changed to "global" all the expected groups were listed again.