You are the administrator for contoso.com and the Global Administrator for contoso.onmicrosoft.com. You create users for all the domain users in contoso.onmicrosoft.com, and add the Department attribute (Sales, Marketing, Accounting). You want to create a group containing all users in Sales or Marketing. The group membership should always be up to date as new Sales and/or Marketing users are added to contoso.onmicrosoft.com. You wish to achieve this goal with as little administrative overhead as possible. What should you do?