Support O365 Groups for security when using Apps. You can add O365 groups to the workplaces for an app...however, when you publish an app you can't add groups to it.
You CAN use AD Security Groups which is WONDERFUL...but you can't use the O365 groups for App control which is odd since you use them in the workspace.