Remove staff from Dynamic distribution group.

I have a dynamic distribution group that pulls all licenses premium users, and we use it to add access to applications. I need to remove accounts that have a premium license but don't need access to the application. I just cannot get the syntax quite right. 

This is the systex rule that I have now.

user.assignedPlans -any (assignedPlan.servicePlanId -eq "23456778-df34-3dfg-fe35-lpn3r07bb09d" -and assignedPlan.capabilityStatus -eq "Enabled")