Managing Vault access via Entra Security Groups over SCIM bridge

In reading the 1P documentation, it seems to me that using Managed groups would allow me to specify which groups have access to which vaults and to manage the group membership in Entra groups (presumable security groups).

Tech support has not been able to answer this question clearly.