Implementing security with AAD security groups