You network contains an on-premises Active Directory domain. The domain contains a universal security group named WVDusers. You have a hybrid Azure Active Direc...

You network contains an on-premises Active Directory domain. The domain contains a universal security group named WVDusers.
You have a hybrid Azure Active Directory (Azure AD) tenant. WVDusers syncs to Azure AD.
You have a Windows Virtual Desktop host pool that contains four Windows 10 Enterprise multi-session hosts.
You need to ensure that only the members of WVDusers can establish Windows Virtual Desktop sessions to the host pool.
What should you do?