The website access is not related to the active directory scanning.
In the website access you cannot configure nested groups, the user must must be a member of the main group.
Active directory scanning scans nested groups, if they are specified in the OU's to scan.