Help on understanding sharing reports to AD groups

Hi Expert,

1. I have a doubt if we are adding users to AD Groups via UAM, can they access the whole workspace? 

2. I want to show only a few reports to one AD Group and another set of reports to another AD Group if users are getting added via UAM and will be sharing single reports to that workspace, even at that time they can access all the workspace reports.

Kindly help me understand this and do the needful.

Best Regards,

K