principal
The ID of the Principal (User, Group or Service Principal) to assign the Role Definition to. Changing this forces a new resource to be created.
NOTE: The Principal ID is also known as the Object ID (ie not the "Application ID" for applications).