I managed to get this working after rebuilding the container and skipping the migration. Then removing the credentials from the Auth Providers so only SSO is allowed. FInally settingt he Group name in Homarr to the group UUID from azure. After that I am now getting the correct permissions from the group.