Role mapping for Azure AD OAuth token with overage indicator

Hi all, I am setting up Azure AD OAuth for Grafana and I want to only allow users in a few security groups to log in.

Reading through github and documentation, it looks like I need to set role_attribute_name.

However, most of my users belong to a lot of groups, so Azure AD return groups:src1, i.e. overage indicator https://stackoverflow.com/a/53525331/4092412 . How do I configure Grafana to handle this? Thanks,

How did you configure Oauth in Grafana/Azure? I use also Azure, but I don’t see groups in the userinfo response. I’ve tried also Microsoft Graph API.