Add the ability to include groups or resources in Privileged Identity Management (PIM)

Vote for this new type by clicking the thumbs-up.

A useful future addition for this module would be the ability to include groups (or resources or RBAC roles) into PIM and to set policies for them.

A starting point for this feature would be the PIM Graph APIs that already exist (https://learn.microsoft.com/en-us/graph/api/resources/privilegedidentitymanagement-for-groups-api-overview?view=graph-rest-beta), although I imagine they might need some Bicep-ification on the API end (e.g. if they need a unique name for example).

Such an addition would be useful for a particular workflow that I have where we often need to create groups that are assignable in PIM - we can now create the groups in Bicep (which eliminates 90% of the work), but we still need a manual step for setting up PIM policies.