Let's explore the new group writeback feature in Microsoft Entra ID.
With the release of provisioning agent 1.1.1370.0, cloud sync now has the ability to perform group writeback. This feature means that cloud sync can provision groups directly to your on-premises Active Directory environment. You can also now use identity governance features to govern access to AD-based applications, such as by including a group in an entitlement management access package.
Migration Guide from v2 to Cloud Sync - https://learn.microsoft.com/en-us/ent...