Got it: this should be it, was a bit harder to get the google terms right but im good to go 🙂 https://www.pulumi.com/docs/reference/pkg/azure/containerservice/kubernetesclusternodepool/ Edit: I know that we should be slowly migrating to the native provider, but I went through some posts and github issues yesterday and there was a mention of role assignments being more difficult now. If I remember correctly, roles cannot simply be specified by the definition name (eg "Network Contributor") but have to be looked up and passed by ID. Of course I cannot find the issue now, but are there many 'breaking changes' to past workflows or is it a matter of moving arguments from old to new parameters / properties?