Skip role assignment handling for emulators (#9705) (#9716)

- Updated `BuildRoleAssignmentAnnotations` to skip processing for container emulators.
- Added a new test `DoesNotApplyRoleAssignmentsInRunModeForEmulators` to verify that role assignments are not applied to emulator resources.

Co-authored-by: David Fowler <[email protected]>

Author: eerhardt

src/Aspire.Hosting.Azure/AzureResourcePreparer.cs

@@ -143,6 +143,12 @@ private async Task BuildRoleAssignmentAnnotations(DistributedApplicationModel ap
                         .ToLookup(a => a.Target);
                 foreach (var azureReference in azureReferences.OfType<AzureProvisioningResource>())
                 {
+                    if (azureReference.IsContainer())
+                    {
+                        // Skip emulators
+                        continue;
+                    }
+
                     var roleAssignments = azureReferencesWithRoleAssignments[azureReference];
                     if (roleAssignments.Any())
                     {

tests/Aspire.Hosting.Azure.Tests/AzureResourcePreparerTests.cs

@@ -133,6 +133,28 @@ await Verifier.Verify(storageRolesManifest.BicepText, extension: "bicep")
         }
     }
 
+    [Fact]
+    public async Task DoesNotApplyRoleAssignmentsInRunModeForEmulators()
+    {
+        using var builder = TestDistributedApplicationBuilder.Create(DistributedApplicationOperation.Run);
+        builder.AddAzureContainerAppEnvironment("env");
+
+        builder.AddBicepTemplateString("foo", "");
+
+        var dbsrv = builder.AddAzureSqlServer("dbsrv").RunAsContainer();
+        var db = dbsrv.AddDatabase("db");
+
+        var api = builder.AddProject<Project>("api", launchProfileName: null)
+            .WithReference(db);
+
+        using var app = builder.Build();
+        var model = app.Services.GetRequiredService<DistributedApplicationModel>();
+        await ExecuteBeforeStartHooksAsync(app, default);
+
+        // in RunMode, we skip applying the role assignments to a new 'dbsrv-roles' resource, since the storage is running as emulator.
+        Assert.DoesNotContain(model.Resources.OfType<AzureProvisioningResource>(), r => r.Name == "dbsrv-roles");
+    }
+
     [Fact]
     public async Task FindsAzureReferencesFromArguments()
     {