From 75abf668abeea29792af1ba805bc0099ed14968a Mon Sep 17 00:00:00 2001
From: staleycyn <45440075+staleycyn@users.noreply.github.com>
Date: Tue, 10 Jan 2023 14:41:23 -0800
Subject: [PATCH] Update LAB_02a_Manage_Subscriptions_and_RBAC.md

---
 Instructions/Labs/LAB_02a_Manage_Subscriptions_and_RBAC.md | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/Instructions/Labs/LAB_02a_Manage_Subscriptions_and_RBAC.md b/Instructions/Labs/LAB_02a_Manage_Subscriptions_and_RBAC.md
index af52288e..7173f28f 100644
--- a/Instructions/Labs/LAB_02a_Manage_Subscriptions_and_RBAC.md
+++ b/Instructions/Labs/LAB_02a_Manage_Subscriptions_and_RBAC.md
@@ -185,9 +185,9 @@ In this task, you will create an Azure Active Directory user, assign the RBAC ro
 
    ```powershell
    
-   $scope = (Get-AzRoleDefinition -Name 'Support Request Contributor (Custom)').AssignableScopes[0]
-
-   Remove-AzRoleAssignment -ObjectId '[object_ID]' -RoleDefinitionName 'Support Request Contributor (Custom)' -Scope $scope
+    $scope = (Get-AzRoleDefinition -Name 'Support Request Contributor (Custom)').AssignableScopes | Where-Object {$_ -like 'managementgroup'}
+    
+    Remove-AzRoleAssignment -ObjectId '[object_ID]' -RoleDefinitionName 'Support Request Contributor (Custom)' -Scope $scope
    ```
 
 1. From the Cloud Shell pane, run the following to remove the custom role definition: