The scope for this role assignment, should be a valid resource ID. Changing this forces a new resource to be created.