You network contains an on-premises Active Directory domain. The domain contains a universal security group named AVDusers. You have a hybrid Azure Active Direc...

You network contains an on-premises Active Directory domain. The domain contains a universal security group named AVDusers.
You have a hybrid Azure Active Directory (Azure AD) tenant. AVDusers syncs to Azure AD.
You have an Azure Virtual Desktop host pool that contains four Windows 10 Enterprise multi-session hosts.
You need to ensure that only the members of AVDusers can establish Azure Virtual Desktop sessions to the host pool.
What should you do?