Design least-privilege Azure RBAC roles across subscription, resource group, and resource scopes.
npx skills add https://github.com/manu14357/skills --skill azure-rbac-manu14357
Please help me install this Agent Skill. Skill: azure-rbac Source: https://github.com/manu14357/skills/tree/main/skills/azure-rbac Command: npx skills add https://github.com/manu14357/skills --skill azure-rbac-manu14357
Design and implement Azure RBAC with least privilege across management scopes (subscription, resource group, and resources), enabling scalable governance and auditable access control.
Provide your Azure environment details and governance goals so this skill can produce a scoped, least-privilege RBAC plan.
High-intent search queries and answers about installing and using this skill.
To design least-privilege Azure RBAC, select appropriate built-in or custom roles and scope assignments strictly at the subscription, resource group, or resource level. This minimizes access risk while enabling scalable, auditable governance across all teams.
The best way to manage Azure RBAC governance at scale is migrating from per-user assignments to group-based access management. This enables ongoing access reviews and standardized role mapping, ensuring permissions remain auditable and minimized over time.
Privileged Identity Management (PIM) integrates with Azure RBAC by providing time-bound, elevation-enabled access control. This allows users to activate specific role assignments temporarily, ensuring standing privileged access is minimized and audited within your governance workflow.
Use custom roles instead of built-in roles for Azure access management when predefined permissions grant excessive scope or unnecessary actions. Custom roles allow precise permission mapping tailored to specific workload requirements, strictly enforcing least-privilege principles.
Yes, you can migrate per-user Azure role assignments to group-based RBAC. This migration involves mapping current user permissions to Azure AD groups, simplifying ongoing access reviews and ensuring scalable, auditable governance across your organization.
olivomarcoEnumerate Azure resources across subscriptions and resource groups using Azure Resource Graph.
celticht32Manage Couchbase users, groups, roles, and permissions for RBAC administration.
usepowershellDetermine minimal Azure roles and generate CLI and Bicep assignment snippets.
mfcollins3Design, implement, and troubleshoot Azure RBAC, ABAC, deny assignments, and PIM usage.
