azure not allowing multiple copies of the same role to exist is one of the most tedious problems to fix with pulumi