skills.rest
jonathan-vella
jonathan-vellaCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

azure-rbac

Generate Azure CLI commands and Bicep code for least-privilege RBAC role assignments.

6|2|Updated Jan 29, 2026
Search Tags:#CLI commands#identity management#role assignment#Azure RBAC#Bicep code
One-click install
npx skills add https://github.com/jonathan-vella/azure-smb-rf --skill azure-rbac-jonathan-vella
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: azure-rbac
Source: https://github.com/jonathan-vella/azure-smb-rf/tree/main/.github/skills/azure-rbac
Command: npx skills add https://github.com/jonathan-vella/azure-smb-rf --skill azure-rbac-jonathan-vella

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires az, and includes scripts (resource) components.

What problem does it solve?

This Skill helps users determine the appropriate Azure RBAC role for an identity with least privilege access, and then generates the necessary CLI commands and Bicep code to assign it.

Core Features & Use Cases

  • Role Discovery: Identify the minimal role definition that matches the desired permissions.
  • Custom Role Creation: Generate a custom role definition if no built-in role matches the requirements.
  • CLI Command Generation: Produce CLI commands to assign the role to an identity.
  • Bicep Code Generation: Provide a Bicep code snippet for adding the role assignment.
  • Use Case: When you need to assign a specific role to a managed identity or a user for a particular resource.

Quick Start

Run the azure-rbac skill with the identity and resource details to find the appropriate RBAC role and generate the commands to assign it.

Frequently Asked Questions about azure-rbac

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I assign an Azure RBAC role to a managed identity with least privilege?▼

You find the minimal built-in role definition matching your desired permissions, or generate a custom role definition, and then produce Azure CLI commands to assign that role to the identity.

What is the best way to create a custom Azure RBAC role definition?▼

When no built-in role matches your least privilege access requirements, you can generate a custom role definition and output the corresponding Bicep code snippet for deployment.

Do I need Azure CLI installed to generate Bicep code for role assignments?▼

Yes, Azure CLI and Bicep are required dependencies, as the workflow uses them to identify the appropriate role and generate the executable commands for assignment.

Can I generate Bicep code for assigning Azure RBAC roles to specific resources?▼

Yes, you can generate a Bicep code snippet for adding an Azure RBAC role assignment, specifically targeting a managed identity or user for a particular resource.

How does role discovery work for Azure identity management?▼

Role discovery works by identifying the minimal role definition that matches your desired permissions, ensuring least privilege access before generating the assignment commands.

Related Skills

Explore More Software Engineering Skills→
jorgeasaurusjorgeasaurus
12

azure-rbac

Determine Azure RBAC roles and generate CLI and Bicep assignment code.

Community
Intermediate
jgezelscorpjgezelscorp

azure-rbac

Identify Azure RBAC roles and generate CLI commands and Bicep code.

Community
Intermediate
jongiojongio
6

azure-role-selector

Identifies least-privilege Azure RBAC built-in or custom roles and generates CLI/Bicep assignments.

Community
Intermediate
usepowershellusepowershell
9

azure-role-selector

Determine minimal Azure roles and generate CLI and Bicep assignment snippets.

Community
Intermediate