Currently, Azure AD groups cannot be used in user groups to give access to users to the specific functions in D365. E.g. if user groups are used for general journal approval, users need to be added manually to the user group. If the AAD group could be added to the user group, users in the AAD group would get access and no manual maintenance is needed.