assign RBAC role for multiple principals in bicep

assignRBAC

targetScope = 'managementGroup'

param roleDefinitionId string = 'b60367af-1334-4454-b71e-769d9a4f83d9'
param assignmentScope string = 'BicepRules'
param principalIds array = [
  'xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx',
  'yyyyyyyy-yyyy-yyyy-yyyy-yyyyyyyyyyyy'
]

resource rbac 'Microsoft.Authorization/roleAssignments@2020-04-01-preview' = [for principal in principalIds: {
  name: guid(roleDefinitionId, assignmentScope, principal)
  properties: {
    principalId: principal
    roleDefinitionId: '/providers/Microsoft.Authorization/roleDefinitions/${roleDefinitionId}'
  }
}]