Enhance examples and documentation for role assignments, adding scenarios for multiple principals and role constraints

variables.tf

@@ -36,12 +36,12 @@ variable "delegable_roles" {
 }
 
 variable "restricted_roles" {
-  type = list(string)
-  default = []
+  type        = list(string)
+  default     = []
   description = "Role definitions names that RBAC Administrator is not allowed to assign/delete via ABAC condition."
 
   validation {
-    condition = length(distinct(var.restricted_roles)) == length(var.restricted_roles)
+    condition     = length(distinct(var.restricted_roles)) == length(var.restricted_roles)
     error_message = "restricted_roles must not contain duplicates."
   }
 }