Need Method to Allow PIM Group Elevation Without Granting Full Access to Azure Portal

I’m currently managing Conditional Access policies in our tenant to enforce strict access to the Azure portal. Specifically, we've restricted access to azure unless the user is coming from an approve...