Vault OIDC with google, how to restrict roles to specific groups

I am also interested in this question!