Allow Azure Firewall to be deployed to different resource group to VNet
Currently Azure firewall must be in the same RG as the VNet, which impacts current RBAC models.
Steven Soave commented
Yep, I'd like to see this too. It restricts RBAC of the two services a little.