Sharing components inside managed solution

[joseror]

Hi!
I successfully created actions to deploy across several environment using SPN auth. Since the solution is owned by the service principal in the target environment, how can I include sharing inside of the workflows so that an Entra ID group is assigned as user (not owner) to all solution components (canvas apps and flows)?
Also, anyone has any experience with generating deployment settings file so that connection references work properly in the target environment without manually adding them?
Thanks.