we are able to set rights to team sites etc via ad groups, but not for email notifications. This has to be set indiviudally but is a pain to keep up to date if you have an organisation that is changing regularly.