Support roles assigned to groups

Is your feature request related to a problem? Please describe.

Currently a role can only be assigned to a user. This is not scalable, particularly when combined with SSO and JIT provisioning of users and groups. Any organization with a non-trivial number of users makes it problematic to have to manage roles at a user level.

Describe the solution you'd like

Enhance the security model to allow assignment of role(s) to group(s) with users inheriting permissions from the groups they are members of. This is a pretty standard model.

Describe alternatives you've considered

n/a

Additional context