Assign admin role via group

Would be helpful to assign the admins via group. It would allow us to enable just-in-time admin instead of accounts having the admin role at all times.