Returns Active Directory groups flagged as at-risk due to overly broad
permissions, privileged access, or policy violations. Results exclude
groups that have been granted a full risk exemption.

Use the type parameter to switch between active at-risk groups and
groups currently in an exempted state.