Feature Request: Assign role at the scope of Management group via ARM template

We have the following requirements for deployment via ARM template:

1. Deploy a VM with a system-assigned Managed Identity
2. Perform role assignment to this identity, specifically to assign Contributor built-in role at the scope of Management Group

Thanks,
Sourabh

Start by reviewing the repository's ARM template examples and Azure role-assignment documentation, focusing on system-assigned identities and management-group scope. Done means a deployable template creates the VM identity and assigns the built-in Contributor role at the requested management-group scope.

Written by the indexing model from the issue text.