MFNE 4.12.0.26 now includes the following option.
Option to directly provision groups to O365:
The Groups Provisioning Wizard can now be configured to bypass a Microsoft security check that otherwise prevents direct provisioning of groups from Domino to Office 365 in hybrid-O365 scenarios (where O365 is synchronized with a local Active Directory).
The feature is enabled or disabled by a new boolean parameter in the [ActiveDirectory] section of Task Parameters and Global Defaults:
BypassAddGroupMemberSecurityCheck=1
The feature is off (0) by default.