No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.

Pulumi Community

Never tried it but appears Pulumi has a built in function.

<https://www.pulumi.com/registry/packages/azure-native/api-docs/authorization/getroledefinition/|https://www.pulumi.com/registry/packages/azure-native/api-docs/authorization/getroledefinition/>

The thing I don't like about the API is defining a scope.  With CLI or PowerShell I can do a generic list and get all the roles.  I can then write my own filter.

<https://docs.microsoft.com/en-us/azure/role-based-access-control/role-definitions-list#rest-api|https://docs.microsoft.com/en-us/azure/role-based-access-control/role-definitions-list#rest-api>