azure-rbac

Identify Azure RBAC roles and generate CLI commands and Bicep snippets.

Updated Apr 19, 2026
One-click install
npx skills add https://github.com/Avihai-H/infraops --skill azure-rbac-avihai-h
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: azure-rbac
Source: https://github.com/Avihai-H/infraops/tree/main/.github/skills/azure-rbac
Command: npx skills add https://github.com/Avihai-H/infraops --skill azure-rbac-avihai-h

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires azure-cli, bicep, and includes scripts (resource) components.

What problem does it solve?

The azure-rbac skill resolves the complexity of determining and assigning the appropriate Azure RBAC roles, providing commands and Bicep code for assignment while offering insights on necessary permissions.

Core Features & Use Cases

  • Role Identification: Automatically identifies the minimal Azure RBAC role suitable for an identity based on least privilege requirements.
  • CLI Command Generation: Generates CLI commands to assign the identified role to a user.
  • Bicep Code Snippet: Offers a Bicep code snippet for automated deployment of role assignments.
  • Use Case: Ideal for infrastructure as code (IaC) practices, this skill assists in securing Azure environments by defining RBAC rules without manual intervention.

Quick Start

Determine the correct Azure RBAC role using azure-rbac, then assign it to a managed identity.

Frequently Asked Questions about azure-rbac

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I assign Azure RBAC roles using Bicep templates?

Assign Azure RBAC roles using Bicep by deploying generated code snippets that define role assignments for managed identities. This approach automates permission configuration within infrastructure as code deployments, ensuring secure and repeatable environment setup without manual CLI intervention.

What is the best way to determine the minimal Azure RBAC role for least privilege?

Determining the minimal Azure RBAC role for least privilege involves analyzing user needs and matching them to the specific permissions required. This process identifies the most restrictive role suitable for an identity, preventing over-assignment and securing Azure infrastructure effectively.

Do I need Azure CLI installed to generate Azure RBAC assignment commands?

Yes, Azure CLI is a required dependency to execute the generated Azure RBAC assignment commands. The skill produces CLI commands for assigning roles to users, which must be run in an environment where the Azure CLI is installed and authenticated.

Can I use Bicep to automate Azure RBAC role assignments for managed identities?

Yes, Bicep can automate Azure RBAC role assignments for managed identities. The skill provides Bicep code snippets that define and deploy these assignments directly, integrating role-based access control into your infrastructure as code practices for automated and consistent provisioning.

Why assign Azure RBAC roles through infrastructure as code instead of the Azure portal?

Assigning Azure RBAC roles through infrastructure as code ensures repeatable, version-controlled deployments and prevents configuration drift. It secures Azure environments by defining RBAC rules systematically, avoiding manual portal interventions and maintaining least privilege across deployments.

Azure RBAC role assignment not working with Bicep, what are the limitations?

Limitations when assigning Azure RBAC roles with Bicep include ensuring the deploying identity has sufficient permissions to create role assignments. Proper role definition IDs and principal IDs must be accurately referenced in the Bicep snippet to prevent deployment failures.