What problem does it solve?
This Skill helps users identify the most appropriate Azure Role-Based Access Control (RBAC) role for a given identity, ensuring adherence to the principle of least privilege. It also automates the generation of necessary CLI commands and Bicep code for role assignment.
Core Features & Use Cases
- Role Identification: Determines the correct built-in or custom RBAC role based on required permissions.
- Command Generation: Creates Azure CLI commands to assign the identified role to a specified identity.
- Bicep Code Snippet: Provides Bicep code for declarative role assignment, incorporating Azure best practices.
- Use Case: A user needs to grant an Azure Function's managed identity read-only access to Azure Blob Storage. This skill will find the appropriate 'Storage Blob Data Reader' role and generate the CLI command and Bicep code to assign it.
Quick Start
Find the least privilege role for an identity to read blobs and generate the CLI command to assign it.