I am sure there is a better way to achieve it hence I thought to ask it here. Currently I am creating PIM role assignment (both active and eligible) in a different resource block for each of the default roles in Azure. e.g. Data Factory Contributor, Grafana Editor and many others.