To assign a role to a group or user (let's say the contributor role to a resource group deployed via pulumi), what permissions / rights does the Service Principal used by Pulumi need ? @tall-librarian-49374 I know you already answered some questions about Assignements in the dotnet channel but I did not find anything concernig necessary rights.