Provide instructions to create custom role at the management group level

[SvenAelterman]

It is conceivable that a research organization has organized multiple subscriptions under a common Management Group. In that case, creating the role at the Management Group level will prevent each research subscription Owner to have to follow those steps.

Doc: Management Groups: Azure custom role definition and assignment