Role assignments are too broad (RG instead of resource)

[tonybaloney]

All of the role assignments in bicep are scoped to the resource group instead of the assigned resource.

Ideally, they should be for the resource. Not sure if this is possible because of dependencies.