Hi all, I'm trying to provide a group name and role name, look them up to get the id, and then create a role assignment in a resource group. I'm unable to find something in Pulumi to resolve role id's. Anyone know of a way? This is what I have so far:

var ownerGroup = AzureAD.GetGroup.InvokeAsync(new()
                    {
                        DisplayName = ownerGroupName,
                        SecurityEnabled = true,
                    });
                    if (ownerGroup.Result.Id == null)
                    {
                        throw new ArgumentException($"group {ownerGroupName} not found");
                    }

                    var roleAssignment = new AzureNative.Authorization.RoleAssignment($"{rgName}Owner", new()
                    {
                        PrincipalId = ownerGroup.Result.Id.Split("/")[2],  // id will be /groups/id, so get the id part
                        PrincipalType = AzureNative.Authorization.PrincipalType.Group,
                        Scope = thisRg.Id,
                        RoleDefinitionId = "/providers/Microsoft.Authorization/roleDefinitions/8e3af657-a8ff-443c-a75c-2fe8c4bcb635"
                    });

I'd like to replace the hardcoded

RoleDefinitionId

with a looked up value from name

You have an example in this article 👉 https://leebriggs.co.uk/blog/2022/01/23/gha-cloud-credentials

good point about them being static. I'll just hardcode them as constants