How about using the script you shared in the post below? You mentioned that you used tags to identify the governance group, but I’m thinking of utilizing the additional owners field to determine the governance group instead.
I noticed that you used the search entitlements API to retrieve the payload and extract the owner’s email from it. However, in my case, I can only see the owner’s ID and name. So, I believe I’ll need to add another function to fetch the email address using the Owners identity ID.