Azure provisioner add optional property for group visibility

Groups in azure have a visibility of Private, Public, or Hiddenmembership. The default is Public, which is not always desired.

Note, this only matters for Unified groups, so is dependent on GRP-2671