I have a AKS cluster where I get the cluster.NodeResourceGroup by doing .Apply(). I then use that to create role assignments for the NodeResourceGroup. This is all well and good until I do a change on the cluster. If I do a change on the cluster the Apply() method does not return the NodeResourceGroup anymore, but only an empty string, which then breaks the role assignments later in the code. What is the correct approach to doing this?