This is now on our roadmap. We're planning to let you scope elevation rules to user groups, so members of a given AD or Entra ID group automatically get the access the rule grants without per-user or per-machine setup. If there are group scenarios you rely on (nested groups, multiple groups per rule, Mac users), tell us in the comments — that helps us get the first version right.