AZURE AD USER GROUPS PORTAL ACCESS ON BIG-IP APM

Hi Guys,

I am trying to create different portal access on a webtop per different groups of users on Azure AD. We all know that it were an AAA server used for authentication, all we would need would be to update the groups and then use the ad group resource assign on the Access visual policy Editor and then assign resources per group. But in the case where the APM is integrated with Azure and using Azure AD services, how do we specify groups on Azure for different portal access resources on the BIG-IP APM?

Thank you.