IDM to full manage groups

Hi everyone,

I would like to know if it is possible to set an AD group to fully managed by the IDM.

- users cannot be added/removed from the group unless made directly in IDM (manager)

thanks in advance.