Oh, I know about that. That's a file with a "system" attribute flag for a reason. The file is sometimes pretty well-defined in the ReAgent.xml, including a fixed path. This is one of the rare cases where it really shouldn't be _anywhere_ else. For context, I wrote this: github.com/MHimken/WinR....

Although it's possible to migrate a cloud group from on-premises to Entra and sync group members managed in the cloud back to AD, the documentation omits crucial steps. I hope this helps you experiment with this process.

Firstly, yes, this is reversible.
Secondly, the SID stays the same.
Thirdly, your groups need to be universal in order to sync back from Entra to ADDS. This isn't documented properly.
Fourthly, Cloud Sync is a prerequisite but doesn't explain how to set it up properly.