Description of problem:

In the OpenShift installed in Azure cluster, the ccoctl deleting additional role added on a additional feature in minor update. Issue is that today it deletes any role assignment it doesn't know breaking the additional functionalities until we re-add the roles.

But It should delete/update role assignment that is managed by ccoctl and leave the additional role assignments.

https://github.com/openshift/cloud-credential-operator/blob/d66761c098427c1a700d984c78d03f785d233d83/pkg/cmd/provisioning/azure/create_managed_identities.go#L285

Expected Result:

During the upgrade to minor openshift version ccoctl must be run to update the managed identities.