Currently MaxScale PAM authentication only supports simple user mapping, not group mapping like MariaDB server does:
Document user and group mapping support for PAM authenticators
Allow PAM user and group mapping to work with more specific host than '%'
Document how to configure user and group mapping for PAM authenticators
Enable Pam.d Support