Access reviews

PIM for Groups and access reviews: govern privileged group membership

Put privileged Microsoft Entra groups under PIM for Groups so membership is eligible and time-bound, protect activation, and recertify members with access reviews.