Hi Raman,
LDAP and active directory are well supported for authentication and authorization. Roles may be assigned to individual users or LDAP groups:
Authorization introduction:
https://www.elastic.co/guide/en/shield/current/authentication.html
LDAP-specific configuration:
https://www.elastic.co/guide/en/shield/current/ldap.html
Hope this helps!