You need to meet the identity and access requirements for Group1.

Add a membership rule to Group1.

Delete Group1. Create a new group named Group1 that has a membership type of Office 365. Add users and devices to the group.

Modify the membership rule of Group1.

Change the membership type of Group1 to Assigned. Create two groups that have dynamic memberships. Add the new groups to Group1.