Seems most of the pertinent info has been covered below, but you did not mark anything as the solution, so please be sure to close out the thread by doing so, if you did something different, you can post that and then use the Accept as Solution button on that post...
Here are some likely useful links, but I also wanted to reiterate some points, things need to be in format of DOMAIN\USER or GROUP and they must be Security objects, Distribution objects will not work. I believe all three security types should work but cross-domain may cause issues, just FYI, but it sounded like you had everything in a single domain.
Those two links should allow you to double-check things, and oh, last thing I did forget to mention is everything in the Section Access table load MUST be uppercase too, forgot that one.
To help users find verified answers, please do not forget to use the "Accept as Solution" button on any post(s) that helped you resolve your problem or question. I now work a compressed schedule, Tuesday, Wednesday and Thursday, so those will be the days I will reply to any follow-up posts.
I have not been able to get this to work yet, and in total transparency, I have not spent anytime on it in the last few weeks as there have been other priorities. I do want to get back to this and I do want to make this work as it will help us out a great deal.
You mentioned it is more complicated if there are multiple domains and I am wondering if that is contributing to my problem. We have a few domains or sub-domains (not really my expertise). I will review the links and get back here once soon.