B24988ac 2024 42a0 Ab88 20f7382dd24c.  — if you are trying to understand how an azure role works or if you are creating your own azure custom role, it's helpful to understand how roles are defined. In the following i will first provide our working example that shows the warning in the bicep template, and then the suggested fix by bicep which fails.

 — @peterbons the permissions used for the managed identity equals contributor, which is more than sufficient: I found that there is two commands each i can use to query information about what user has which eligible role assignments.