F5 APM - Group Resource Assign How to?

I want to provision LDAP Group Resource Assign allowing Active Directory groups to be assigned APM resources. How can i make fallback deny if no matching groups are found? The branch rules have n...