Second topic is about the

authorization

module which can be used to create RBAC role assignments. I cannot make sense of the API surfaces of this module. Some of the API versions are only about roles. Other API versions are only about policies (which are a different thing). Some API versions contain varying amounts of both. Some are neither, but seem to only contain stuff about management locks! See attached a couple of examples. I’m very confused. 😅 Are these API versions somehow supposed to be used in combination, even for the same module? Like, create a role assignment using this API version, then a policy assignment using this other API version, etc.?

We just map whatever Azure ships. And yes, you can mix-and-match versions, even for the same resource provider.