previously we were told to use the ARO's created RG for our OSC created resources (image, VMs...) , however, to support workload identity the user's is not allowed to create the identity within the ARO's RG, hence it's not possible anymore, we'll need to verify with them what is the correct approach