skills.rest
microsoft
microsoftOFFICIAL
Explore all skills by this author →
Website𝕏@OpenAtMicrosoftGitHub

azure-rbac

Identify minimal Azure RBAC roles and generate CLI and Bicep assignment artifacts.

2.9k|323|Updated Jan 16, 2026
Search Tags:#cli#permissions#azure#rbac#bicep#least-privilege#role-assignment
One-click install
npx skills add https://github.com/microsoft/skills --skill azure-rbac-microsoft
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: azure-rbac
Source: https://github.com/microsoft/skills/tree/main/.github/plugins/azure-skills/skills/azure-rbac
Command: npx skills add https://github.com/microsoft/skills --skill azure-rbac-microsoft

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Helps users identify the correct Azure RBAC role for an identity with least privilege and generates the required CLI commands and Bicep code to assign it, plus guidance on permissions needed to grant roles.

Core Features & Use Cases

  • Minimal-role discovery: finds built-in roles that match the desired permissions or suggests custom roles when needed.
  • Automatic generation: produces CLI commands to assign the role and a Bicep snippet for deployment.
  • Prerequisites guidance: outlines the permissions and prerequisites required to grant roles in Azure.

Quick Start

Ask the Azure RBAC helper to identify the least-privilege role for your identity and generate the necessary CLI and Bicep artifacts.

Frequently Asked Questions about azure-rbac

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find the least-privilege Azure RBAC role for an identity?▼

The skill identifies the minimal built-in Azure RBAC role for an identity by matching desired permissions, and suggests custom role definitions when built-in options exceed the required least-privilege scope.

How do I generate Bicep templates and CLI commands for Azure role assignments?▼

You can generate Bicep templates and CLI commands for Azure role assignments by specifying the identity and target resource, which produces the required deployment artifacts automatically.

What permissions do I need to grant Azure RBAC roles to other identities?▼

Granting Azure RBAC roles requires specific prerequisites, including having the necessary permissions such as Owner or User Access Administrator at the target scope to manage role assignments.

Can I use Bicep to deploy custom Azure RBAC role definitions?▼

Yes, you can use Bicep to deploy custom Azure RBAC role definitions when built-in roles do not align with your least-privilege requirements, generating the necessary deployment snippets.

What is the best way to apply least-privilege access when assigning Azure RBAC roles?▼

The best way to apply least-privilege access is to identify the minimal built-in role matching your permissions or define a custom role, then generate the exact CLI and Bicep artifacts for assignment.

Related Skills

Explore More Software Engineering Skills→
subimagesecsubimagesec

connect-azure

Create an Azure service principal with Reader role for SubImage inventory access.

Official
Advanced
jorgeasaurusjorgeasaurus
12

azure-rbac

Determine Azure RBAC roles and generate CLI and Bicep assignment code.

Community
Intermediate
jongiojongio
6

azure-role-selector

Identifies least-privilege Azure RBAC built-in or custom roles and generates CLI/Bicep assignments.

Community
Intermediate
usepowershellusepowershell
9

azure-role-selector

Determine minimal Azure roles and generate CLI and Bicep assignment snippets.

Community
Intermediate