There seems to be a shortcoming in the

azure-native.authorization.RoleAssignment

resource as it is unable to handle multiple role assignments on the same resource and same role but with different identities. I added two role assignments in my script for an Azure Container Registry with the role AcrPull for two different identities and after one of them is created the other one complains that the role assignment already exists, however it does not. It confuses the assignment with the first one it created.