Hi @Joseph Miller ,
just to verify:
The Host VM is member in a Active Directory? (AADS or "local" AD)?
The user is a member in the same AD domain as VM?
The group is member in the same AD domain as VM and user?
Everything is synced from AD to AAD?
----------
(If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)
Regards
Andreas Baumgarten