Using RBAC to authorize Graph API Notifications sent to Eventhub

Question

Hi All,

We have requirement to use RBAC instead of SAS to get the Graph API change notifications delivered to Eventhub.
Does the Microsoft Graph Change Tracking application support RBAC permissions ?

It seems same question was asked by someone earlier here https://stackoverflow.com/questions/66264825/use-rbac-to-authorize-ms-graph-api-to-send-change-notifications-to-azure-event-h

Is there any solution would following configuration work ? Any suggestions would be very much appreciated.

1. Assign the "Azure Event Hubs Data Sender" role to the "Microsoft Graph Change Tracking" principal,
2. update the notification URL of my graph subscription requests to remove the access key. The URL is still stored in an azure keyvault (as per docs), in the form Endpoint=sb://<my namespace>.servicebus.windows.net/;EntityPath=<my ehub name>

Thanks,
Santosh