Enhance AAD privileged access including PIM for Groups and Least privilege policy check

[ssatyapal123]

Description

This epic is about enhancing the ScubaGear AAD policies pertaining to highly privileged access (section 7).

AAD Policy enhancement issues:

• Perform hands-on prototyping of AAD PIM for Groups to plan Scuba baseline document and source code changes #755
• Update AAD baseline policies and instructions to include PIM for Groups #376
• Determine the AAD Cmdlets necessary to get PIM for Groups data and test them #756
• Update AAD provider to include PIM for Groups data in JSON #757
• Investigate use of SecureScore to satisfy AAD 7.2 #548

Goal

The goal is to improve the AAD secure configuration baseline by including Microsoft functionality PIM for Groups into the baseline.

Hypothesis

By improving the set of AAD highly privileged access policies, ScubaGear can be made more usable and relevant to real-world tenants. This hypothesis can be tested by collecting feedback from agencies and running the tool internally against tenants in which these roles are implemented to support a range of users and missions.

Acceptance criteria

Criteria that are considered must have for feature launch and in-scope for this epic include:

• All linked issues have been completed

[ssatyapal123]

Closes #697 as completed.