The azure managed groups should not be modifiable from BOX, as this brings inconsistency in what azure says, as well as brings clutter.

My example:

If you have group 1 in azure, replicated in box group 1, you should not be able to modify box group 1 in box, it should be blocked.

This is already the case in tools like Atlassian, where synced groups from AD are non modifiable.

This brings security breaches, as, in the admin user console, when you search a user, all the access that he has been given by azure groups, do not apear in the console.