also, I realized we cannot even rename workspace local groups as they are coming from AAD for us.