The problem here is, that it isn't possible on the Azure Active Directory side to assign a member (AADUser) to a mailenabled security group.
This is the reason for the customizer error warning.
It is not possible to assign a member in the Microsoft Azure webfront to a mailenabled security group.
There is a replicating algorithm on the Microsoft side, which maps such memberships between exchange online and azure.