Authorize request based on JWT group claims with API protection profile

Hello all! I´m trying to figure out a way to authorize requests that have been already authenticated by an Oauth scope step in the per-request policy. Conceptually it sounds quite simple: if a group...