Whilst trying to setup the Dirsync/AAD Connect group licensing, I came across this the link below:
Would really recommend it in terms of the following:
- Group nesting.
- Group licensing being only available to security groups.
- Impacts of removing a user from a group.
- Performance implications.
- Logging and auditing.