For now we have to know each role’s ID

I built a little helper class for this, here it is in case you find it helpful

I only added the ones I needed, but you can add the ones you want from here: https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles