diff --git a/src/infra/resourceGroup.bicep b/src/infra/resourceGroup.bicep
index 59cf08b..bb5a0ba 100644
--- a/src/infra/resourceGroup.bicep
+++ b/src/infra/resourceGroup.bicep
@@ -9,7 +9,18 @@ param resourceGroupName string
 ])
 param location string
 
+@description('Principal ID of the resource deployment principal')
+param resourceDeploymentPrincipalId string
+
 resource rg 'Microsoft.Resources/resourceGroups@2023-07-01' = {
   name: resourceGroupName
   location: location
 }
+
+module ra 'roleAssignment.bicep' = {
+  name: 'ra'
+  scope: resourceGroup(rg.name)
+  params: {
+    resourceDeploymentPrincipalId: resourceDeploymentPrincipalId
+  }
+}
diff --git a/src/infra/resourceGroup.dev.bicepparam b/src/infra/resourceGroup.dev.bicepparam
index 0c46d62..4d9f2b4 100644
--- a/src/infra/resourceGroup.dev.bicepparam
+++ b/src/infra/resourceGroup.dev.bicepparam
@@ -2,3 +2,4 @@ using 'resourceGroup.bicep'
 
 param resourceGroupName = 'eit-vms-plc-dev-rg-1'
 param location = 'polandcentral'
+param resourceDeploymentPrincipalId = 'e548b4a5-b3e3-4baf-b215-c0329e885419'