Manage MailEnabled AADGroups

Memberships in groups (with HasReadOnlyMemberships= 1) are filled dynamically in the target system, memberships cannot be influenced by One Identity Manager.
So you need to decide whether you use Dynamic group membership in Azure AD or for example Dynamic roles in OneIM.
support.oneidentity.com/.../invalid-assignments-to-read-only-azure-group-memberships

Sorry, I don't undestrand. You mean that I can use Dynamic Roles in OneIM to assign such groups (MailEnabled=1 or HasReadOnlyMemebership=1) to AADUser and provisioning it to the target?
Thanks,
Roberto 

Another thing, I tried to set the value MailEnabled to false and HasReadOnlyMembership to false for one aadgroup. Now I can manage manually the membership and the accounts can also inherite the memberships from person entitlements. Moreover the provisioning succeded. But why ONEIM do not allow me to assign groups depending on those attributes? I expected the behaviour of ONEIM was setted in order to be consistent with Azure AD behaviour... but it seems ONEIM do not allow me to do something I can insted do in Azure, am I wrong?
Thanks

The AADGroup's with HasReadOnlyMemberships = 1 and GroupTypes = 'DynamicMembership' are controlled by Azure AD by means of:
Rules for dynamically populated groups membership - Azure AD - Microsoft Entra | Microsoft Learn
OneIM can only take control of these groups if you remove the dynamic rules from the group in Azure AD