Power BI gateway doubt

Yes you need to add them here so they map their semantic models to this data source when they publish and yes, using security group is a valid option to lower manual effort in the fabric tenant. We use that approach for our customers.

yeah that one.
that screenshot comes from here

with all the roles for both gateways and connections described.
for both setup you can use security group.