azure-rbac

Identify minimal Azure RBAC roles and generate CLI commands plus Bicep snippets.

Updated Aug 27, 2026

Search Tags:#cli #permissions #azure #rbac #bicep #least-privilege #role-assignment

Ready to run

npx skills add https://github.com/iinoshirozheng/SinoCloudChat --skill azure-rbac-iinoshirozheng

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: azure-rbac
Source: https://github.com/iinoshirozheng/SinoCloudChat/tree/main/.agents/skills/azure-rbac
Command: npx skills add https://github.com/iinoshirozheng/SinoCloudChat --skill azure-rbac-iinoshirozheng

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Helps users identify the correct Azure RBAC role for an identity with least privilege access, then generates CLI commands and Bicep code to apply the assignment.

Core Features & Use Cases

Identify built-in or custom roles that fit the required permissions.
Generate CLI commands and Bicep snippets to assign roles to identities.
Provide prerequisites and guidance on permissions needed to grant roles.

Quick Start

Provide the identity and desired permissions to receive the corresponding role, CLI commands, and Bicep snippet to apply the assignment.

Frequently Asked Questions about azure-rbac

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I assign an Azure RBAC role with least privilege access?▼

To assign an Azure RBAC role with least privilege access, provide the target identity and desired permissions to receive the matching role definition, CLI commands, and Bicep snippet for the assignment.

What is the minimal Azure RBAC role for read access to blobs?▼

The minimal Azure RBAC role for read access to blobs is identified by matching the desired permissions against built-in or custom role definitions to ensure least-privilege access across Azure resources.

Can I generate Bicep snippets for assigning roles to managed identities?▼

Yes, you can generate Bicep snippets and CLI commands for assigning roles to managed identities by specifying the identity and the required permissions to apply the assignment.

What permissions are needed to grant Azure RBAC role assignments?▼

Granting Azure RBAC role assignments requires specific prerequisites and permissions, which are provided as guidance alongside the generated CLI and Bicep artifacts to implement the assignment.

Does Azure RBAC role assignment work with custom role definitions?▼

Yes, Azure RBAC role assignment works with custom role definitions by identifying built-in or custom roles that fit the required permissions for an identity and generating the applicable CLI commands.

What's the best way to apply least-privilege access across Azure resources?▼

The best way to apply least-privilege access across Azure resources is to identify the minimal matching Azure RBAC role and deploy it using the generated concrete CLI commands and Bicep artifacts.