Use well known names for role definitions

Author: theunrepentantgeek

v2/samples/authorization/v1api20200801preview/v1api20200801preview_roleassignment.yaml

@@ -14,6 +14,6 @@ spec:
     name: identity-settings
     key: principalId
   roleDefinitionReference:
-    # This ARM ID represents "Contributor" - you can read about other built in roles here: https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles
-    armId: /subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c
+    # ASO allows you to specify global roles by name instead of the published GUID
+    wellKnownName: contributor
 

v2/samples/authorization/v1api20220401/v1api20220401_roleassignment.yaml

@@ -14,5 +14,5 @@ spec:
     name: identity-settings
     key: principalId
   roleDefinitionReference:
-    # This ARM ID represents "Contributor" - you can read about other built in roles here: https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles
-    armId: /subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c
+    # ASO allows you to specify global roles by name instead of the published GUID
+    wellKnownName: contributor

v2/samples/insights/v1api20240101preview/refs/v1api20220401_roleassignment.yaml

@@ -12,5 +12,5 @@ spec:
     name: admin-settings
     key: principalId
   roleDefinitionReference:
-    # This is the ID of the built-in "Monitoring Contributor" role. See https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles for more.
-    armId: /subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c
+    # ASO allows you to specify global roles by name instead of the published GUID
+    wellKnownName: contributor

v2/samples/redhatopenshift/v1api/refs/v1api20220401_roleassignment_from_rp_to_vnet.yaml

@@ -13,5 +13,5 @@ spec:
   # This can be fetched by using `az ad sp list --display-name "Azure Red Hat OpenShift RP" --query "[0].id" -o tsv` command
   principalId: 00000000-0000-0000-0000-000000000000
   roleDefinitionReference:
-    # This ARM ID represents "Contributor" - you can read about other built in roles here: https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles
-    armId: /subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c
+    # ASO allows you to specify global roles by name instead of the published GUID
+    wellKnownName: contributor

v2/samples/redhatopenshift/v1api/refs/v1api20220401_roleassignment_from_sp_to_vnet.yaml

@@ -12,5 +12,5 @@ spec:
   # This is the Principal ID of the AAD identity to which the role will be assigned
   principalId: 00000000-0000-0000-0000-000000000000
   roleDefinitionReference:
-    # This ARM ID represents "Contributor" - you can read about other built in roles here: https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles
-    armId: /subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c
+    # ASO allows you to specify global roles by name instead of the published GUID
+    wellKnownName: contributor