when doing a role assignment import https://www.pulumi.com/registry/packages/azure-native/api-docs/authorization/roleassignment/#import it seems to be strange that the command

pulumi import azure-native:authorization:RoleAssignment <pulumi-name> /{scope}/providers/Microsoft.Authorization/roleAssignments/{roleAssignmentName}

only the

scope

and

roleAssignmentName

asked for? where

scope

is the resource you are granting permissions to and

roleAssignmentName

is the role that has been granted, but what if you have multiple assignments, how does it know which `principalId`'s assignment it should import?