Forward ActiveSync Requests if user is member of BLABLA

Hi   I'm trying to deploy an APM policy for Exchange ifrastructure. Here is the hard part for my knowledge. I have to check user's membership and then forward them to "deny||allow" branch. Since, ...