Hi, does pulumi have an equivalent for

az ad sp create-for-rbac --role="Contributor" --scopes="/subscriptions/SUBSCRIPTION_ID"

or what kind resources i have to create with pulumi to have a service principal, which is able to sign in to the subscription and has contributor rights to deploy new resources inside a cicd pipeline?

I'm not 100% familiar with Azure, but from my understanding, what you want can be done like this: https://gist.github.com/igstan/7bed390f5d5bbb478167ca7b6f2c939b

Ah ok thx. I will check this.