https://www.scharschinger.de/2019/08/20/how-to-use-intune-rbac-scope-tags-update-with-default-label/