diff --git a/upup/pkg/fi/cloudup/azure/roleassignment.go b/upup/pkg/fi/cloudup/azure/roleassignment.go
index 82d31c18fa..9af255d010 100644
--- a/upup/pkg/fi/cloudup/azure/roleassignment.go
+++ b/upup/pkg/fi/cloudup/azure/roleassignment.go
@@ -44,7 +44,10 @@ func (c *roleAssignmentsClientImpl) Create(
 	parameters authz.RoleAssignmentCreateParameters,
 ) (*authz.RoleAssignment, error) {
 	resp, err := c.c.Create(ctx, scope, roleAssignmentName, parameters, nil)
-	return &resp.RoleAssignment, err
+	if err != nil {
+		return nil, err
+	}
+	return &resp.RoleAssignment, nil
 }
 
 func (c *roleAssignmentsClientImpl) List(ctx context.Context, scope string) ([]*authz.RoleAssignment, error) {