sync permission denied on azure ad user

[aquarelacs-rodrigo-araujo]

We have an integration of argocd with azure ad for login sso, in argo's official documentation they specify that permission can be granted to a group via the group id, but I don't have a license to add a group to the Enterprise application, only users , how can I give permission per user inside the config map ? I tried using the object id, but it didn't work.