Next Generation API Data Protection supports Active Directory (AD) user group as a collaborator option. With this enhancement, you can include AD user groups from 3rd-party identity vendors.
When a user group (i.e. AD/IdP group) is added as a matching criterion to a policy, it will match any resource that is accessible by a member of one of the configured groups or a sub-group thereof. It is functionally equivalent to adding all of the users who are members of the group to the policy match criteria.