What problem does it solve? Choosing the correct Azure RBAC role for an identity is error-prone: built-in roles are numerous, over-privileged assignments create security risk, and writing the assignment commands or Bicep by hand is tedious. This Skill identifies the minimal role matching the permissions you need and produces ready-to-use assignment artifacts. ## Core Features & Use Cases - Least-Privilege Role Lookup: Searches Azure documentation to find the built-in role that minimally matches the permissions you want to grant. - Custom Role Generation: Creates a custom role definition when no built-in role fits the desired permission set. - CLI and Bicep Output: Generates Azure CLI commands for the role assignment plus a Bicep snippet following Azure best practices. - Use Case: You need a managed identity to read blobs from a storage account. Ask which role to assign, and receive the least-privilege role (e.g., Storage Blob Data Reader), the az CLI assignment command, and the Bicep roleAssignment resource. ## Quick Start Ask which Azure RBAC role you should assign to a managed identity so it can read blobs from a storage account, and request the CLI command and Bicep code for the assignment.
