Graph Bicep module does not work with deployment stack

[dozer75]

Bicep version
Bicep CLI version 0.44.1 (28275db947)

Resource and API version
Which Microsoft.Graph resource and API version has the issue?

• br:mcr.microsoft.com/bicep/extensions/microsoftgraph/v1.0:1.0.0
• Microsoft.Graph/servicePrincipals@v1.0

Auth flow
CD deployment in Azure Devops pipelines using the AzureCLI@2 task and a managed identity with the required Application.Read.All and AppRoleAssignment.ReadWrite.All permissions.

Deployment details
Please refer to #302

Describe the bug
When deploying the bicep mentioned in #302 using deployment stack, the error (also described in #302) is triggered.

To Reproduce

1. Create a bicep deployment that deploys the bicep in Assigning Graph roles to a managed identity #302.
2. Have a managed identity that has the Application.Read.All and AppRoleAssignment.ReadWrite.All Graph permissions.
3. Use that managed identity (e.g. in a CD pipeline in Azure DevOps) and run az stack sub create to deploy it.

Additional context
It is quite a showstopper since it doesn't work with deployment stacks...

[eketo-msft]

Updating to feature ask. Currently there are some engineering blockers to enable Deployment Stacks but we should have a more concrete ETA in the next quarter.

[dozer75]

Ok! It would be nice if this limitation is documented, it wasted quite a few days for me investigating this...

[eketo-msft]

It should be documented in https://learn.microsoft.com/en-us/graph/templates/bicep/limitations#unsupported-deployment-features but I'll check with the docs team to see if it can be made more explicit.