Add role in web.config

Hi,

I have a web.config that looks like this:

<configuration><system.web><authorization><allow roles="skaredom\se-eos users"/><deny users="*"/></authorization></system.web></configuration>

This works on premise, but now I want it to work in Azure. I have an Azure web site where it works to change allow roles to <allow user="myemail.address@skaredom.com" (actually I had to change this from skaredom\myaccount when onprem). But when adding the skaredom\se-eos users group it won't work. 

Regarding my network/Azure guys at work, they have added a synchronization of that specific group to Azure AD.

So should it work similar to this? Should I change the name to a "FQDN" address, as se-eos-users@skaredom.com or similar? Is there a FQDN name for groups/roles? If so, what to do with the space in the group name?

Best regards
/Magnus

Magnus Burk