Maybe it's me, but I find it difficult to find lot of examples of using Pulumi with Azure (especially in C#). Some sample from the classic provider have not been upgraded to Native provider so I have trouble to understand how do to do some basic things. For instance assigning a Storage Blob Data Reader role to an Azure Function (through its managed identity) seems complicated. It seems to me that RoleAssignment is what I am looking for but I am not sure how to use it, especially because I think I have to use the guid from this role. Anyone has already done that ?

I think you are on the right path. Indeed, the ARM API is a bit low-level here, and so is the native provider. Maybe this example would help? https://github.com/pulumi/examples/blob/master/azure-ts-call-azure-sdk/index.ts

Thanks @tall-librarian-49374, interesting way to do that. To have something more simple I hardcoded the id from this page in the documentation which gives all the ids to use. What would be great is to have an enum with all these values directly in Pulumi (I guess these ids never change) , what do you think ?

This is a good suggestion. Maybe we could treat it in line with https://github.com/pulumi/pulumi-azure-native/issues/797

Done : https://github.com/pulumi/pulumi-azure-native/issues/797#issuecomment-919499146