az role assignment create fails

az role assignment create --debug --assignee XXX-XXX-XXX-XXX-XXX --role XXX-XXX-XXX-XXX-XXX --resource-group rgname

fails with The request was incorrectly formatted.

msrest.http_logger : Request body:
msrest.http_logger : {"properties": {"roleDefinitionId": "XXX-XXX-XXX-XXX-XXX", "principalId": "XXX-XXX-XXX-XXX-XXX"}}
requests.packages.urllib3.connectionpool : Starting new HTTPS connection (1): management.azure.com
requests.packages.urllib3.connectionpool : https://management.azure.com:443 "PUT /subscriptions/XXX-XXX-XXX-XXX-XXX/resourceGroups/XXX/providers/Microsoft.Authorization/roleAssignments/XXX-XXX-XXX-XXX-XXX?api-version=2015-07-01 HTTP/1.1" 400 88
msrest.http_logger : Response status: 400

msrest.http_logger : Response content:
msrest.http_logger : b'{"error":{"code":"BadRequestFormat","message":"The request was incorrectly formatted."}}'
msrest.exceptions : The request was incorrectly formatted.

[tzaroon]

Issue Resolved on my end.

I was trying to give the role to the storage in the bicep.

var storageBlobDataContributorRoleID = 'ba92f5b4-2d11-453d-a403-e96b0029c9fe'

I was writing this property as : roleDefinitionId: storageBlobDataContributorRoleID it failed

Then I tried this one: roleDefinitionId: resourceId('Microsoft.Authorization/roleDefinitions', storageBlobDataContributorRoleID)

It worked perfectly.

[hasheddan]

@asc-adean are you still experiencing this issue?

I believe it will function correctly if you provide your role_definition_id in the following format:

/subscriptions/${var.subscription_id}/providers/Microsoft.Authorization/roleDefinitions/1c0163c0-47e6-4577-8991-ea5c82e286e4