azure-rbac

Identify Azure RBAC roles and generate CLI commands and Bicep code.

Updated Apr 11, 2026

Search Tags:#RBAC #CLI #Azure #infrastructure-as-code #Bicep #role management

Ready to run

npx skills add https://github.com/jgezelscorp/Apex --skill azure-rbac-jgezelscorp

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: azure-rbac
Source: https://github.com/jgezelscorp/Apex/tree/main/.github/skills/azure-rbac
Command: npx skills add https://github.com/jgezelscorp/Apex --skill azure-rbac-jgezelscorp

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps users quickly identify the appropriate Azure RBAC role to grant access with least privilege and then generates the necessary CLI commands and Bicep code to do so.

Core Features & Use Cases

Role Identification: Determines the best Azure RBAC role for the desired permissions.
CLI Commands Generation: Generates commands to assign the role using Azure CLI.
Bicep Code Generation: Provides a Bicep snippet for the role assignment in an infrastructure-as-code workflow.
Use Case: Need to set up an Azure Storage account for a user with read-only access? This Skill can identify the correct role and generate the commands to assign it.

Quick Start

Use the 'azure-rbac' skill to generate the required commands and Bicep code for the 'Contributor' role.

Frequently Asked Questions about azure-rbac

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I find the correct Azure RBAC role for least privilege access?▼

Azure RBAC role identification for least privilege requires matching desired permissions to a specific built-in role definition. This approach ensures users receive only the access necessary, minimizing security risks while generating the required assignment commands.

How do I generate Bicep code for an Azure role assignment?▼

To generate Bicep code for an Azure role assignment, you define a Microsoft.Authorization/roleAssignment resource within your infrastructure-as-code template. This Bicep snippet specifies the role definition ID and principal ID to deploy access controls programmatically.

What is the best way to assign Azure RBAC roles using CLI?▼

The best way to assign Azure RBAC roles using CLI is executing the az role assignment create command. This command requires the role definition, assignee object, and scope parameters to apply access controls directly to your Azure environment.

Can I use Bicep to manage Azure RBAC role assignments?▼

Yes, you can use Bicep to manage Azure RBAC role assignments by declaring role assignment resources in your templates. This integrates access control configuration directly into your infrastructure-as-code deployment workflow for consistent environment provisioning.

Do I need Azure CLI to assign RBAC roles with infrastructure-as-code?▼

You do not strictly need Azure CLI to assign RBAC roles if you use infrastructure-as-code tools like Bicep, which deploy role assignments natively through ARM templates. However, CLI remains useful for scripting and quick manual assignments.