A seed-catalog lab tries to delete a custom Azure role definition, but the portal refuses because three resource groups still list it. What must happen before the definition can be removed?
Select an answer to reveal the explanation.
Short Explanation
You cannot shred the badge template while three desks still wear that badge—including PIM “eligible” badges waiting in the drawer. Clear every assignment first, then delete the custom role definition.
Full Explanation
Azure blocks deletion of a custom role definition while assignments still reference it. Remove active and eligible assignments (including PIM-eligible Azure resource role assignments) before deleting the definition. Changing the display name does not remove assignments; the role ID remains the stable identifier.