Protect vRA workloads via NSX Security Group - with selection

I know GrantOrchardVMware created an article a couple of years back where he used the custom property VCNS.SecurityGroup.Names

This however doesn't seem to work with vRA 7.0.1 but there is also no new custom property where this is possible.

If you do try it - you will likely get an error :

Has anyone managed to do this without the use of XaaS ?