azure-cli: az identity create returns for created in AD

Describe the bug az identity create returns before the identity has been fully created, if you try do a role assignment straight after it will fail with:

No matches in graph database for '138d8747-9262-4a78-8842-4ae3e1682bbc'

I’m currently working around it with a sleep 10, tried 3 and 5 before but not long enough

To Reproduce az group create -n rg -l uksouth

export IDENTITY_CLIENT_ID=$(az identity create -g ${NODE_RESOURCE_GROUP} -n ${BASE_NAME} --query clientId -o tsv)

export SUBSCRIPTION_ID=$(az account show --query id -o tsv) az role assignment create --role Reader --assignee ${IDENTITY_CLIENT_ID} --scope /subscriptions/${SUBSCRIPTION_ID}/resourcegroups/rg

Expected behavior Some sort of check should be done to make sure it is fully created before exiting the command

Environment summary Install Method (e.g. pip, interactive script, apt-get, Docker, MSI, edge build) / CLI version (az --version) / OS version / Shell Type (e.g. bash, cmd.exe, Bash on Windows)

brew mac

$ az --version
azure-cli (2.0.54)

Additional context Add any other context about the problem here.