Update directory group and alert identity managers before audit

Your device provisioning webhooks arrive uncorrelated, causing group misassignments and missed license checks. Identity managers get corrected membership and a single alert so license gaps close before the next compliance review.