This message was deleted.

not sure, I always add an AAD group

Yes, I started with a group for our developers. But I also want to add a Managed Identity (App Service) as an admin (this might not be approperiate regarding security reasons though).