Targeting Workstyles at Entra ID Device Groups (26.3.1) Not Working

Currently testing the new feature for targeting workstyles at Entra ID device groups (26.3.1).

• Entra ID is integrated and granted permissions per documentation. Groups were synced.
• Device group was searched and added to the computer filter of a Workstyle in the policy.
• Test client device was rebooted and synced using the Endpoint Utility.

Seems that the targeting isn’t working thus far for me. When syncing with /aad or /identity /refresh, an error states that user is not supported or no filter in place:

c:\Program Files\Avecto\Privilege Guard Client>EndpointUtility.exe /aad
BeyondTrust Utility Tool
Copyright (C) 2026 BeyondTrust Corp.
Requesting that BeyondTrust Privilege Management refresh its groups…
Error: This user is not supported or there is no filter in place.

Targeting works if the computer hostname is added to the computer filter. Any ideas?