azure-rbac

Query Azure RBAC assignments and definitions using Azure CLI JSON output.

Updated Aug 27, 2026
One-click install
npx skills add https://github.com/BreakerOfStems/claude-skills --skill azure-rbac
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: azure-rbac
Source: https://github.com/BreakerOfStems/claude-skills/tree/main/skills/azure-rbac
Command: npx skills add https://github.com/BreakerOfStems/claude-skills --skill azure-rbac

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps you understand who has access to what resources within your Azure environment without the risk of making unintended changes.

Core Features & Use Cases

  • View Role Assignments: See all role assignments across subscriptions, resource groups, or specific resources.
  • Inspect Role Definitions: Understand the permissions granted by built-in or custom roles.
  • Use Case: A security auditor needs to quickly verify that only authorized personnel have 'Contributor' access to a critical resource group.

Quick Start

List all role assignments for the subscription.

Frequently Asked Questions about azure-rbac

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I view Azure RBAC role assignments for a subscription?

To view Azure RBAC role assignments for a subscription, you query them in a read-only capacity using Azure CLI with JSON output. This retrieves structured data showing who has access without risking unintended configuration changes.

Can I inspect Azure role definitions to understand granted permissions?

Yes, you can inspect Azure role definitions to understand the specific permissions granted by built-in and custom roles. The Skill queries these definitions in a read-only capacity to clarify exact access levels across resources.

Do I need Azure CLI to check access control permissions?

Yes, you need Azure CLI installed to check access control permissions. The Skill requires Azure CLI with JSON output enabled to properly retrieve and structure the RBAC assignment data for your security auditing needs.

What is the best way to perform a security audit of Azure access without making changes?

The best way to perform a security audit of Azure access without making changes is using a read-only query method. This approach retrieves role assignments and definitions safely, ensuring compliance checks do not alter configurations.

Does this read-only Azure RBAC query method work for resource groups and individual resources?

Yes, this read-only Azure RBAC query method works across subscriptions, resource groups, and individual resources. It supports access reviews at varying scopes to verify authorization levels for critical infrastructure components.