How to use Azure Bicep to provision permission (Microsoft.Authorization/roleAssignments) for Azure function to access Microsoft graph API? - azure-managed-identity

Question

I have an Azure function with Managed identity that needs to access Microsoft graph api (specifically Application.Read.All, ServicePrincipalEndpoint.Read.All roles). The Azure function infrastructure is created using Bicep file. Is it possible to provision access to Graph API using 'Microsoft.Authorization/roleAssignments'?
Below is what i have attempted but it fails with message The specified role definition with ID '9f9ce928e0384e3b8faf7b59049a8ddc' does not exist.
resource roleAssignmentForMicrosoftGraphApiAppRegistration 'Microsoft.Authorization/roleAssignments#2020-10-01-preview' = {
name: guid('9a5d68dd-52b0-4cc2-bd40-abcf44ac3a30', functionApp.id, functionAppName)
properties: {
principalType: 'ServicePrincipal'
principalId: functionApp.identity.principalId
roleDefinitionId: '/providers/Microsoft.Authorization/roleDefinitions/9a5d68dd-52b0-4cc2-bd40-abcf44ac3a30'
}
}
Note: I know that the roles can be assigned using power shell scripts (called within Bicep), i was looking for much simpler solution. For example, the trust b/w Azure function and its storage account can be done using Managed identity access using below snippet, is smilar solution availabel for accessing Graph api?
resource roleAssignmentForStorageAccount 'Microsoft.Authorization/roleAssignments#2020-10-01-preview' = {
name: guid(storageAccount.id, functionApp.id, functionAppName)
scope: storageAccount
properties: {
principalType: 'ServicePrincipal'
principalId: functionApp.identity.principalId
roleDefinitionId: subscriptionResourceId('Microsoft.Authorization/roleDefinitions', 'e****************************1')
}
}