On-Call Rosters To use Roles defined by AD

We have like 30k+ users on the AD.
In my settings for Security > User Sources I have define the two OU's I use for my security groups which is shown in the Roles section.

However when I'm trying to add users the On-Call Rosters I can not just choose one of the security groups defined in the role section.

It seems like that the only way is to manually add users which takes quite a while, I also have to manually remove them again if they are no longer member of the group. Our membership is externally managed so there is no way for me to know when to add them or remove them.

I hope that I just has missed a basic setting ?

Moved to Support, #83990