How to Integrate with Azure AD to automatically create user groups for application security?

Hi,

We are using Appian on-prem version and implemented SAML authentication for single sign.

We have a requirement that our on-prem server will be accessible to multiple development team and we want to implement application security. What i understood from Appian documentation that Groups are used to implement role based security from Appian application. my questions are

1. Is there any other way to implement Application security other than Groups?

2. Can we create groups automatically by integrating with Azure AD, and during user login group will be created and users will be mapped?

Thanks,

Bipindra Singh