Password required for an mssql login

[nathanblair]

We have Entra ID-authentication only enabled for our MSSQL Server.

As such, our Logins (outside of the MSSQL Server default logins) are all Entra ID principals.

To add them with pure SQL, we would use something like

CREATE LOGIN [$login] FROM EXTERNAL PROVIDER
ALTER SERVER ROLE [$role] ADD MEMBER [$login]

I would like to use this provider to help manage our server logins in addition to our database users but I'm unable to piece together how EXTERNAL PROVIDER logins with no passwords and specific roles would work with this provider. Is this an unsupported use case?