skills.rest
sergeyitaly
sergeyitalyCOMMUNITY
Explore all skills by this author →
GitHub

azure-rbac-diagnostics

Diagnose Azure RBAC permission failures and generate az CLI remediation commands.

1|Updated Jun 11, 2026
Search Tags:#azure#rbac#terraform#az cli#role assignments#cloud diagnostics#permission errors
One-click install
npx skills add https://github.com/sergeyitaly/claude-skill-deployer --skill azure-rbac-diagnostics
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: azure-rbac-diagnostics
Source: https://github.com/sergeyitaly/claude-skill-deployer/tree/main/skills_library/azure-rbac-diagnostics
Command: npx skills add https://github.com/sergeyitaly/claude-skill-deployer --skill azure-rbac-diagnostics

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill eliminates the frustration of Azure deployment, Terraform apply, or application failures caused by unclear RBAC permission errors, where users struggle to tell if the issue is missing identity privileges or actual code misconfiguration, and don't know the exact steps to resolve the issue.

Core Features & Use Cases

  • Failure Classification: Distinguishes between three common permission failure types: missing privileged roles for the executing identity (e.g., CI service principals lacking User Access Administrator to create role assignments), missing data-plane access for target managed identities (e.g., Key Vault, ACR, ADX), and actual code misconfigurations like wrong principal IDs or incorrect scope.
  • Exact Remediation Commands: Generates ready-to-run az CLI commands for Azure administrators to grant the required missing permissions, eliminating guesswork.
  • Use Case: When your Terraform CI pipeline fails with a 403 AuthorizationFailed error when trying to create role assignments, this Skill quickly identifies that your service principal only has Contributor access (which cannot create role assignments) and outputs the exact command an admin needs to run to fix the issue.

Quick Start

Use the azure-rbac-diagnostics skill to diagnose the 403 permission error from your latest failed Azure deployment and get the exact remediation command to resolve it.

Frequently Asked Questions about azure-rbac-diagnostics

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
Why does my Terraform apply fail with a 403 AuthorizationFailed error when creating role assignments?▼

Terraform apply fails with a 403 AuthorizationFailed error because your executing service principal likely has Contributor access but lacks the User Access Administrator role required to create Azure role assignments. Diagnosing Azure RBAC errors distinguishes missing deployer privileges from code misconfigurations.

How do I fix Azure Key Vault or ACR access denied errors for my managed identity?▼

Fix Azure Key Vault or ACR access denied errors by diagnosing missing data-plane permissions for your target managed identity. This Skill classifies the failure and generates exact az CLI remediation commands to grant the required role assignments to the identity.

How do I distinguish between missing Azure RBAC permissions and code misconfigurations?▼

Distinguish between missing Azure RBAC permissions and code misconfigurations by classifying the failure type. This Skill differentiates missing privileged roles for the executing identity, missing data-plane access for target managed identities, and actual code errors like wrong principal IDs or incorrect scopes.

Do I need User Access Administrator to fix permission errors in my Azure deployment pipeline?▼

You need User Access Administrator in your Azure deployment pipeline if your identity is trying to create role assignments and failing with a 403 error. Contributor access alone cannot grant role assignments, so an admin must run the specific az CLI command to elevate privileges.

Related Skills

Explore More Software Engineering Skills→
fusebase-devfusebase-dev
6

remote-logs

Fetch build and runtime logs from fusebase-deployed backends.

Official
Intermediate
davidrrowleydavidrrowley

azure-rbac

Generate minimal Azure RBAC role assignments with az CLI and Bicep snippets.

Community
Intermediate
jorgeasaurusjorgeasaurus
12

azure-validate

Validate Azure resources for configuration, infrastructure, RBAC, and prerequisites before deployment.

Community
Advanced
jongiojongio
6

azure-role-selector

Identifies least-privilege Azure RBAC built-in or custom roles and generates CLI/Bicep assignments.

Community
Intermediate