hopefully someone knows the answer to this, I'm sure there's a simple answer but I can't find it.

I'm creating a new entitlement policy to add users to an AD group membership, I have added the AD driver to the Entitlement tab and just need to select the group that is to be added.

The two options under Query for entitlement values are: "External Query" and "Cached". It defaults to "Cached" and the newly created group is not listed. However, the radio button by "External Query" is grey and I'm unable to select it.

Does anyone know the reason for this or how to get the entitlements to query AD to get an up to date list of groups present?

To be clear this is the Role-Based Entitlements section within iManager and not in the UserApplication. Screenshot is attached.