Creating a gMSA (Group Managed Service Account) is possible using the Active Roles Management Shell by leveraging the generic
New-QADObject cmdlet:
New-QADObject "gmsaTest"-Type "msDS-GroupManagedServiceAccount"
However, updating the membership policy (stored in the native msDS-GroupMSAMembership attribute) is extremely cumbersome.