You plan to create an Azure Kubernetes Service (AKS) cluster and have the registered server application's manifest available. To integrate the AKS cluster with Azure Active Directory (Azure AD), which manifest property must you modify?

To integrate an AKS cluster with Azure AD for user authentication and authorization, the groupMembershipClaims property in the server application's manifest must be modified. Setting this property (e.g., to "SecurityGroup" or "All") ensures that Azure AD includes the user's group memberships in the ID token issued to the AKS cluster. This allows AKS to use these group memberships for role-based access control (RBAC) within the cluster. accessTokenAcceptedVersion specifies the access token version accepted by the resource, but doesn't directly configure group claims for AKS integration. keyCredentials are used for service principal authentication, not for configuring group claims in user tokens. acceptMappedClaims is related to custom claims mapping in enterprise applications, which is a different mechanism than directly including group memberships.