[Feature Request] Ability to set security on items within Azure DevOps (pipelines, variable groups, etc)

It would be a huge help if there was a way to manage security on specific item types using the cli extensions.

For example, when I create a variable group it would be great if I could add/remove groups to that group. We do this to allow teams to manage variable groups that are specific to their part of the solution