
To add to @Michael Durkan 's answer, all three group types/scopes (Universal, Global, and Domain Local) can be synchronized, but there are limitations around the domain local and global scopes.
If you use group writeback, for instance, all groups are written back with the group scope of universal.
Currently, Azure AD Connect does also not recognize nested groups for authorization.
Additionally, ADFS does not pull Domain Local groups, only universal and global groups. This is because domain local groups would be extremely slow since every domain would have to be queried as they aren't replicated.
Let me know if this helps and if you have further questions.
-
If the information helped you, please Accept the answer. This will help us as well as other members of the community who might be researching similar information.