Hello, My team has been using Pulumi for over 2 years. We love it! We use MS Azure DevOps pipeline to deploy our web API and one of the tasks is to deploy IoC using Pulumi works great except for Microsoft Entra ID in MS Azure. We created customer application registration in Microsoft Entra ID using AzureAD.Application. No problem it works fine. We assigned roles to the app registration using AzureAD.AppRoleAssignment. All good works fine. The issue is when we run the Azure DevOps pipeline again to deploy new code to production sometimes the roles disappear from the custom app registration. We need to rerun the pipeline twice for roles to appear in the custom app registration in Microsoft Entra ID. Why do the roles (AzureAD.AppRoleAssignment) disappear from AzureAD.Application? Why do we need to rerun the pipeline twice? Is there a way to fix this? Thank you very much.