Identify minimal Azure RBAC roles and generate CLI and Bicep assignment code.
npx skills add https://github.com/Chieji/my-skills --skill azure-rbac-chieji
Please help me install this Agent Skill. Skill: azure-rbac Source: https://github.com/Chieji/my-skills/tree/main/azure-rbac Command: npx skills add https://github.com/Chieji/my-skills --skill azure-rbac-chieji
Helps users identify the minimal Azure RBAC role for an identity, and provides a guided path to assign it via CLI and Bicep while detailing required permissions to grant roles.
Use the azure-rbac skill to identify the minimal Azure RBAC role for an identity and generate CLI commands and Bicep code to assign it.
High-intent search queries and answers about installing and using this skill.
To find the least-privilege Azure RBAC role, you identify the minimal built-in or custom role that matches your requested permissions. This ensures the identity only receives the exact access required, maintaining strict security boundaries.
You assign an Azure RBAC role using CLI and Bicep by generating and applying tailored commands and infrastructure code. This guided assignment automates applying the selected minimal role directly to the target identity across common scenarios.
Granting Azure RBAC role assignments requires Microsoft.Authorization/roleAssignments/write permissions. The selected role must include this specific permission to successfully apply role assignments to the target identity via CLI or Bicep.
Yes, you can use Bicep to apply custom Azure RBAC roles. The process identifies the minimal role whether it is built-in or custom, and generates the corresponding Bicep code to apply it to the identity.
Azure role assignment fails when the least-privilege role lacks Microsoft.Authorization/roleAssignments/write. You must ensure the selected role includes this permission to grant the necessary role assignment permissions across your scenarios.
attentiondotnetIdentify minimal Azure RBAC roles and generate custom role definitions.
sandeepmvnIdentify minimal Azure RBAC roles and generate CLI/Bicep assignments.
davisdreValidate Azure deployment configurations for Bicep, Terraform, or AZD projects.
jongioIdentifies least-privilege Azure RBAC built-in or custom roles and generates CLI/Bicep assignments.
