remove role from blocks with skip assignment

Author: jdmartinez36

articles/databox-online/azure-stack-edge-gpu-deploy-arc-kubernetes-cluster.md

@@ -91,7 +91,7 @@ You can also register resource providers via the `az cli`. For more information,
     Here is an example. 
 
     ```azurecli
-    PS /home/user> az ad sp create-for-rbac --skip-assignment --name "https://azure-arc-for-ase-k8s" --role Contributor
+    PS /home/user> az ad sp create-for-rbac --skip-assignment --name "https://azure-arc-for-ase-k8s"
     {
       "appId": "aa8a082e-0fa1-4a82-b51c-e8b2a9fdaa8b",
       "displayName": "azure-arc-for-ase-k8s",

articles/key-vault/general/manage-with-cli2.md

@@ -195,7 +195,7 @@ For detailed steps on registering an application with Azure Active Directory you
 To register an application in Azure Active Directory:
 
 ```azurecli
-az ad sp create-for-rbac -n "MyApp" --password "hVFkk965BuUv" --role Contributor --skip-assignment
+az ad sp create-for-rbac -n "MyApp" --password "hVFkk965BuUv" --skip-assignment
 # If you don't specify a password, one will be created for you.
 ```
 

articles/virtual-machines/linux/disk-encryption-key-vault-aad.md

@@ -114,7 +114,7 @@ You can manage your service principals with Azure CLI using the [az ad sp](/cli/
 1. Create a new service principal.
 
      ```azurecli-interactive
-     az ad sp create-for-rbac --name "ServicePrincipalName" --role Contributor --password "My-AAD-client-secret" --skip-assignment
+     az ad sp create-for-rbac --name "ServicePrincipalName" --password "My-AAD-client-secret" --skip-assignment
      ```
 3.  The appId returned is the Azure AD ClientID used in other commands. It's also the SPN you'll use for az keyvault set-policy. The password is the client secret that you should use later to enable Azure Disk Encryption. Safeguard the Azure AD client secret appropriately.
 

articles/virtual-machines/windows/disk-encryption-key-vault-aad.md

@@ -114,7 +114,7 @@ You can manage your service principals with Azure CLI using the [az ad sp](/cli/
 1. Create a new service principal.
 
      ```azurecli-interactive
-     az ad sp create-for-rbac --name "ServicePrincipalName" --role Contributor --password "My-AAD-client-secret" --skip-assignment
+     az ad sp create-for-rbac --name "ServicePrincipalName" --password "My-AAD-client-secret" --skip-assignment
      ```
 3.  The appId returned is the Azure AD ClientID used in other commands. It's also the SPN you'll use for az keyvault set-policy. The password is the client secret that you should use later to enable Azure Disk Encryption. Safeguard the Azure AD client secret appropriately.
 

includes/key-vault-sp-creation.md

@@ -16,7 +16,7 @@ For the sake of simplicity however, this quickstart creates a desktop applicatio
 Create a service principal using the Azure CLI [az ad sp create-for-rbac](/cli/azure/ad/sp#az_ad_sp_create_for_rbac) command:
 
 ```azurecli
-az ad sp create-for-rbac --skip-assignment -n "http://<my-unique-service-principal-name>" --role Contributor --sdk-auth
+az ad sp create-for-rbac --skip-assignment -n "http://<my-unique-service-principal-name>" --sdk-auth
 ```
 
 This operation will return a series of key / value pairs.