It should be possible to give access to an AD group in a RLS role. Currently only distribution lists are supported if you're using Office 365 for mail.
And of course distribution lists should be supported as well, even if you're not using Office 365 for mail.
