* Group1 - Yes
Group1 is security enabled, role assignment is not allowed.
Group1 can be managed.
All security enabled groups can be manged by PIM.
Note: Groups in Microsoft Entra ID can be classified as either role-assignable or non-role- assignable. Additionally, any group can be enabled or not enabled for use with Microsoft Entra Privileged Identity Management (PIM) for Groups. These are independent properties of the group.
Any Microsoft Entra security group and any Microsoft 365 group (except dynamic membership groups and groups synchronized from on-premises environment) can be enabled in PIM for Groups. The group doesn't have to be role-assignable group to be enabled in PIM for Groups.
* Group2 - Yes
Group2 is security enabled, role assignment is allowed.
Group2 can be managed.
All security enabled groups can be manged by PIM.
* Group 3 - Yes
Group3 is security enabled, role assignment is allowed.
Group3 can be managed.
All security enabled groups can be manged by PIM.
* Group4 - No
Group4 is not security enabled.
Reference:
https://learn.microsoft.com/en-us/entra/id-governance/privileged-identity-management/concept- pim-for-groups