Tenant → Manage Access → Manage Accounts and Groups -> Blank Screen

No, you need explicitly give permission to the user, not to the AD group.