Support multiple PMPC portals for one Microsoft tenant

Context
I am writing as an Intune specialist managing a single Microsoft 365 tenant shared across multiple institutions, representing ~30K users.

Current Limitation
The current Patch My PC Intune integration, whether configured through the Publisher or the Cloud Portal, only supports a one‑to‑one relationship with the M365 tenant. Once a connection is established, an Entra Enterprise Application is created. Establishing an additional connection is not possible, as attempts result in an “tenant ID is already connected” error.

This limitation also creates a blocking issue at the licensing level. Currently, we need to share the same licenses, meaning any user can consume licenses from any institution's pool. However, our requirement is license separation (per PMPC portal), so each institution can manage and consume only its own licenses.

Proposed Enhancement
Introduce the ability to create and manage multiple PMPC Entra Enterprise applications within the same M365 tenant (many‑to‑one model). This would provide greater flexibility for large or shared environments where multiple institutions operate under a single tenant.

In addition, include an option to specify a specific Entra group (only full admins). Other users would then be limited to using this parent group for application assignments, mirroring the behavior of RBAC scope groups in Intune. The same group should also be used for the Discovery feature. (Similar idea: PATCHMYPC‑I‑6010)

Expected Outcome
Enabling multiple PMPC portals for one Microsoft tenant would allow each institution to maintain a dedicated PMPC portal, with independent deployments, licensing, discovery, and reporting capabilities, while continuing to authenticate through the shared Entra tenant.