This Terraform module assigns BUILT IN roles to users, groups and service principals. The role Reader will be assigned to user1@contoso.com only once.