authorization

var groupName = config.GenerateGroupName("Authorization")
config.SetGroupName(groupName)

ctx := context.Background()
defer resources.Cleanup(ctx)

_, err := resources.CreateGroup(ctx, groupName)
if err != nil {
	util.LogAndPanic(err)
}

list, err := ListRoleDefinitions(ctx, "roleName eq 'Contributor'")
if err != nil {
	util.LogAndPanic(err)
}
util.PrintAndLog("got role definitions list")

var userID string
user, err := graphrbac.GetCurrentUser(ctx)
if err != nil {
	log.Printf("could not get object for current user: %v\n", err)
	log.Printf("using service principal ID instead")
	userID = config.ClientID()
} else {
	userID = *user.ObjectID
}

groupRole, err := AssignRole(ctx, userID, *list.Values()[0].ID)
if err != nil {
	util.LogAndPanic(err)
}
util.PrintAndLog("role assigned with resource group scope")

subscriptionRole, err := AssignRoleWithSubscriptionScope(
	ctx, userID, *list.Values()[0].ID)
if err != nil {
	util.LogAndPanic(err)
}
util.PrintAndLog("role assigned with subscription scope")

if !config.KeepResources() {
	if _, err := DeleteRoleAssignment(ctx, *groupRole.ID); err != nil {
		util.LogAndPanic(err)
	}

	if _, err := DeleteRoleAssignment(ctx, *subscriptionRole.ID); err != nil {
		util.LogAndPanic(err)
	}
}

Output:

got role definitions list
role assigned with resource group scope
role assigned with subscription scope