Good Morning! Anyone managed to use App Masking with EntraID only devices? Our idea was, to create local groups on client devices using Intune and also using Intune to add S-ID of EntraID group to local group. Then using this local group for App Masking assignment. Is there any chance of getting this to work?