terraform-azure/quickstart/201-aks-helm/azuread.tf

resource "azurerm_role_assignment" "default" {
  scope                = azurerm_resource_group.default.id
  role_definition_name = "Network Contributor"
  principal_id         = azurerm_kubernetes_cluster.default.identity[0].principal_id
}