Added role for CLI.

Author: jdmartinez36

articles/communication-services/quickstarts/identity/service-principal-from-cli.md

@@ -48,7 +48,7 @@ To create a registered application from the Azure CLI, you need to be logged in
 The following examples uses the Azure CLI to create a new registered application
 
 ```azurecli
-az ad sp create-for-rbac --name <application-name> 
+az ad sp create-for-rbac --name <application-name> --role Contributor
 ```
 
 The `az ad sp create-for-rbac` command will return a list of service principal properties in JSON format. Copy these values so that you can use them to create the necessary environment variables in the next step.

articles/databox-online/azure-stack-edge-gpu-deploy-arc-kubernetes-cluster.md

@@ -91,7 +91,7 @@ You can also register resource providers via the `az cli`. For more information,
     Here is an example. 
 
     ```azurecli
-    PS /home/user> az ad sp create-for-rbac --skip-assignment --name "https://azure-arc-for-ase-k8s"
+    PS /home/user> az ad sp create-for-rbac --skip-assignment --name "https://azure-arc-for-ase-k8s" --role Contributor
     {
       "appId": "aa8a082e-0fa1-4a82-b51c-e8b2a9fdaa8b",
       "displayName": "azure-arc-for-ase-k8s",

articles/hdinsight/hdinsight-go-sdk-overview.md

@@ -73,7 +73,7 @@ az account set -s <name or ID of subscription>
 Next, choose a name for your service principal and create it with the following command:
 
 ```azurecli-interactive
-az ad sp create-for-rbac --name <Service Principal Name> --sdk-auth
+az ad sp create-for-rbac --name <Service Principal Name> --sdk-auth --role Contributor
 ```
 
 The service principal information is displayed as JSON.

articles/key-vault/general/manage-with-cli2.md

@@ -195,7 +195,7 @@ For detailed steps on registering an application with Azure Active Directory you
 To register an application in Azure Active Directory:
 
 ```azurecli
-az ad sp create-for-rbac -n "MyApp" --password "hVFkk965BuUv" --skip-assignment
+az ad sp create-for-rbac -n "MyApp" --password "hVFkk965BuUv" --role Contributor --skip-assignment
 # If you don't specify a password, one will be created for you.
 ```
 

articles/machine-learning/how-to-setup-authentication.md

@@ -74,7 +74,7 @@ The easiest way to create an SP and grant access to your workspace is by using t
 1. Create the service principal. In the following example, an SP named **ml-auth** is created:
 
     ```azurecli-interactive
-    az ad sp create-for-rbac --sdk-auth --name ml-auth
+    az ad sp create-for-rbac --sdk-auth --name ml-auth --role Contributor
     ```
 
     The output will be a JSON similar to the following. Take note of the `clientId`, `clientSecret`, and `tenantId` fields, as you will need them for other steps in this article.

articles/media-services/previous/media-services-cli-create-and-configure-aad-app.md

@@ -41,7 +41,7 @@ For more information, see [Overview of Azure Cloud Shell](../../cloud-shell/over
 
 ```azurecli
 az login
-az ad sp create-for-rbac --name <appName> 
+az ad sp create-for-rbac --name <appName> --role Contributor
 az role assignment create --assignee < user/app id> --role Contributor --scope <subscription/subscription id>
 ```
 

articles/sentinel/sap-solution-deploy-alternate.md

@@ -46,7 +46,7 @@ spname=<sp-name>
 
 kvname=<keyvaultname>
 # Optional when Azure MI not enabled - Create sp user for AZ cli connection, save details for env.list file
-az ad sp create-for-rbac –name $spname 
+az ad sp create-for-rbac –name $spname --role Contributor
 
 SpID=$(az ad sp list –display-name $spname –query “[].appId” --output tsv
 

articles/synapse-analytics/spark/connect-monitor-azure-synapse-spark-application-level-metrics.md

@@ -37,7 +37,7 @@ To use the Azure Synapse Prometheus connector in your on-premises Prometheus ser
 #### 2.1 Create a service principal:
 
 ```bash
-az ad sp create-for-rbac --name <service_principal_name>
+az ad sp create-for-rbac --name <service_principal_name> --role Contributor
 ```
 
 The result should look like:

articles/synapse-analytics/spark/use-prometheus-grafana-to-monitor-apache-spark-application-level-metrics.md

@@ -49,7 +49,7 @@ Note: This step can be skipped if you already have an AKS cluster.
 ## Create a service principal and grant permission to Synapse workspace
 
 ```bash
-az ad sp create-for-rbac --name <service_principal_name>
+az ad sp create-for-rbac --name <service_principal_name> --role Contributor
 ```
 
 The result should look like:

articles/virtual-machines/linux/build-image-with-packer.md

@@ -37,7 +37,7 @@ Packer authenticates with Azure using a service principal. An Azure service prin
 Create a service principal with [az ad sp create-for-rbac](/cli/azure/ad/sp) and output the credentials that Packer needs:
 
 ```azurecli
-az ad sp create-for-rbac --query "{ client_id: appId, client_secret: password, tenant_id: tenant }"
+az ad sp create-for-rbac --role Contributor --query "{ client_id: appId, client_secret: password, tenant_id: tenant }"
 ```
 
 An example of the output from the preceding commands is as follows: