Integrate apache auth proxy with LDAP group mapping


I am trying to use Apache for authentication and AD for authorization in Grafana but I am not sure if that is possible.
To begin with, I want to use auth.proxy for authentication. Once the user is authenticated and the username (X-WEBAUTH-USER) is returned to Grafana, I want to fetch the AD group that this user is in. This will allow me to leverage LDAP group mappings to assign a role to each user. Is this setup possible?

Do I need to enable both auth.proxy and auth.ldap? Will be great if someone can share configuration settings in grafana.ini to allow this setup.