@Joey Karijowiredjo, Thanks for posting in Q&A. Based on my test in my lab, I find I can add the dynamic group rule with device group object id. In the article, it mentioned some limitation with the group. for example: only direct members of the included groups can be included.
Please ensure the group object id we add meet the requirement.
Hope the above information can help.
If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.