In an extension in Dynamics BC, I can synchronise Entra users by calling SynchronizeAllLicensedUsersFromDirectory in Codeunit "Azure AD User Management". However, this copies all Entra users to my BC environment. I want to restrict this to the User Security Group that may be configured in the Admin center. BC does this with FetchUpdatesFromEnvironmentDirectoryGroup but that code has scope OnPrem and I want to use it in a SAAS implementation.