Azure Ad Dynamic Groups Advanced Rule