thank you kindly for your help up to this point.

So I got frustrated and just started spamming my code and to my surprise it actually executed successfully. Changing nothing and running it again was another failure however.

I added a Start-Sleep -Seconds 5 between the creation of the group and the provisioning of the role and it works. It appears there is enough latency that the role provisioning really was not finding the group because Entra did not provision it yet.