How to get the approle ID automatically provisioned for an Enterprise app

Question

I am using the graph api to automate the install of an Azure Enterprise application for AWS SSO. The last thing I need to automate is the User/Group assignment. I can't seem to find anywhere in the graph or within powershell where I can list all the Roles that are automatically provisioned from AWS that are made available for assignment. If I can get the role ID I can assign them to an AD user or Group but I can find no way to get this. I can manually assign users/group and then get the role ID from that assignment, but I need the Role ID to do the assignment.