Lab 1: fix three README success signals that don't match real CLI output

[abdie-grcengineer]

Ran through Lab 1 end to end on a fresh free account. The setup works and all resources build correctly. Three places in labs/01-sandbox/README.md, though, tell the learner to look for something the CLI doesn't actually print — each one can make a correct step look broken. Fixes below.

1. Step 3 — success signal references a field the command doesn't return

The README says the az role assignment create output shows roleDefinitionName: Reader. It doesn't. The create command only returns roleDefinitionId, which is a GUID path (ends in acdd72a7-3385-48ef-bd42-f606fba81ae7, the built-in Reader role). A learner scans the output for the word "Reader," never finds it, and reasonably thinks they did the step wrong — even though the assignment is correct.

Fix: base the success check on what the output actually contains (principalType: Group + the RG-scoped scope), note that the role shows up only as roleDefinitionId on create, and point to az role assignment list (or the read-back command already in the step) to see the friendly roleDefinitionName.

2. Step 4 — placeholder email is never flagged for replacement

Step 2 explicitly says "Replace you@example.com with your real email." Step 4 shows ./create-budget.sh you@example.com with no such note. That argument becomes the contactEmails for both budget alerts (80% actual, 100% forecast), so a learner who copies it verbatim sends their alerts to a mailbox they don't own and never hears about a runaway.

Fix: add the same "replace with your real email" instruction before the command, and say explicitly that this address is where the budget alerts are delivered.

3. Verify checklist #1 — the given command doesn't show the subscription

The first Verify item is az account management-group show --name mg-grc --expand. --expand only goes one level, so it shows mg-grc → mg-grc-sandbox but not the subscription. Since step 1's subscription add returns silently, a learner running this to confirm their work sees no subscription and can't tell whether it attached.

Fix: add --recurse so the command shows all three levels (mg-grc → mg-grc-sandbox → subscription) and actually confirms the silent add worked.

All three are documentation-only changes to labs/01-sandbox/README.md.

[qodo-code-review]

ⓘ Qodo reviews are paused because the subscription is no longer active. Ask your workspace admin to reactivate the subscription to resume reviews. Manage billing

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: 98cd9a42-018f-43f0-8099-e9f3e6c9959d

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}