How to allow an AD group to publish Cloud Services

I tried to add one of our freshly synched AD groups as "co-administrator" for our Azure subscription, so all of our developers could upload / publish their newly built service intostaging. But Azure tells me "The co-administrator must be either a Microsoft Account or a user account in the ___ directory".

But as long as a user is not "co-administrator" Visual Studio 2013 does not allow him to connect to Azure (ServerExplorer as well as publishing of services).

So how to allow all users of group myOwn_SoftwareDevelopers to publish cloud services, if not by setting the group as co-administrator? If I have to add them each individually, I have to adapt the co-administrators every time I change the group members. Then I would not have to synch the groups at all...