Bug Report - RoleAssignmentUpdateNotPermitted

[thalesazurepoc]

Describe the bug

I have an error when deploying Ent Scale Hub and Spoke from https://docs.microsoft.com/en-us/azure/cloud-adoption-framework/ready/enterprise-scale/implementation .

I run twice as per following link.

Sometimes Policy Assignments Fail During Deployment As Part Of Portal Experience Deployment · Issue #902 · Azure/Enterprise-Scale (github.com)?

I still get the following error.

"status": "Failed",
"error": {
    "code": "DeploymentFailed",
    "message": "At least one resource deployment operation failed. Please list deployment operations for details. Please see https://aka.ms/DeployOperations for usage details.",
    "details": [
        {
            "code": "BadRequest",
            "message": "{\r\n  \"error\": {\r\n    \"code\": \"RoleAssignmentUpdateNotPermitted\",\r\n    \"message\": \"Tenant ID, application ID, principal ID, and scope are not allowed to be updated.\"\r\n  }\r\n}"
        }
    ]
}

Please can someone call me urgently on xxxxxxxxxxxxxxx or email me ASAP.

Steps to reproduce

https://docs.microsoft.com/en-us/azure/cloud-adoption-framework/ready/enterprise-scale/implementation

Hub and Spoke option.

Screenshots

[mattcowen]

@thalesazurepoc please check your subscriptions for old role assignments as advised in #886 then retry and advise.

Thanks
Matt

[jtracey93]

Update from @mattcowen that this has been resolved by removing orphaned role assignments as suggested