Currently, while configuring the Policies we are able to see two options: OU and Group.

By the current design, we have an "OR" between these two objetcs, so when we select one Group and one OU, the ADSS will get all the users inside the OU and all the users in the Group (in any OU).

The feature requested is to have an "AND" option, in case we want to select one Group inside one OU, for example.