We want to automate security access to an EPBCS application from Microsoft AD (Entra). Guide?

Summary:

Content (please ensure you mask any confidential information):

We have a new EPBCS application and need to setup User Groups that only have access to certain Entity hierarchy structures. We have been doing this manually using an IMAGE role and user groups created in EPBCS. Ideally, we would like to create IMAGE roles for the users to request on their own and once approval is given, they would automatically be setup in OCI and given access to the correct EPBCS security group. We know this can be done in Essbase Applications but would like to also do this for our EPBCS Apps. Do you have any