Direct access and access through Azure Active Directory (AD) groups