User wishes to apply policies based on groups
This can be accomplished through DGM. Vontu's Directory Group Matching (DGM) feature lets you create detection rules based on sender/recipient identity.
NOTE: DGM policy rules do not apply to DAR or Endpoint at this time as there is no sender or recipient for these incidents.
For more information on DGMs, see:
TECH220429: Creating a DGM for "Sender/User Matches Directory From"