this ^ is from a git install of HEAD on pulumi-azure, reverting down a version from pypi and using role.assignment (vs role.Assignment as corrected in HEAD) works.. so maybe there's a list of "valid" resources that wasn't updated, or maybe I need to also pull pulumi from HEAD also