https://hostingjournalist.com/advanced-features-of-group-management-azure-active-directory/