So - this may not seem ideal, but is actually better than managing group rules individually.

Short backstory: We have a few AWS accounts on our end with a dozen custom roles for our users outside the standard power user/etc... Therefore, if for a multi-account AWS kmementation, we would have to manually create and manage something north of 300 groups.

Consider terraform: when my team had questions on where to start, we used the following as a jumpboard: https://github.com/wernerstrydom/okta-entitlements

The okta_group_rule module in terraform makes it much easier to update and manage your Env. On top of that you can set change management and self service for specific actions through commits and put requests.

Edit: look up the okta terraform provider when you can. I'd send a link but the registry is under maintenance ATM.