I really want to respond to your comment and go in more depth as to how my work situation is with AD groups etc etc

I just don’t want to be careless and speak more about the particular infrastructure of my company’s workflow than I need to

Suffice to say, we are continuing to move assets to a cloud hosting service. Due to our unique solution, we still require AD groups.

Funny enough, we need the AD groups for the cloud assets to run as expected. It’s a different kind of authorization on-prem