Add force replacement for SqlResourceSqlRoleAssignment

[otahirs]

force replacement for documentdb.SqlResourceSqlRoleAssignment if principalId or scope changes

fix #3701

error: Code="BadRequest" Message="Updating SQL Role Assignment Principal ID is not permitted. You may only update the associated Role Definition.\r\nActivityId: 8a163189-0c65-45c0-9969-d09f2047f41d, Microsoft.Azure.Documents.Common/2.14.0"

[github-actions]

Hi there 👋 Thank you for submitting a pull request.

Acceptance tests must be run by a maintainer. If a maintainer hasn't picked this up after 7 days, please do reach out to a maintainer via our community Slack.

Maintainers: Please review changes then run tests by adding the comment:

/run-acceptance-tests

[thomas11]

Awesome, thank you for this contribution @otahirs!

Were you able to confirm locally that the change has the intended effect? If not you can build via make provider and then run PATH=$your_clone/bin:$PATH pulumi up.

[otahirs]

you can build via make provider and then run PATH=$your_clone/bin:$PATH pulumi up.

thanks for the guidance. I can now confirm that after the change the role gets successfully replaced.

[thomas11]

Superceded by #3711 due to CI permission issues. The commit will still have you as author.