AD Azure filter conditions

Currently our AD Azure source is pulling everything into identitynow including licenses. What is the ideal filter conditions generally used for accounts and groups to pull only active users and groups?