Windows Autopatch doesn't support managing update deployment ring membership using your Azure AD groups. For more information, see Moving devices in between deployment rings.