azure-rbac

Identify Azure RBAC roles and generate CLI commands and Bicep code.

Updated Aug 27, 2026
One-click install
npx skills add https://github.com/MoonAxis/azure-stack --skill azure-rbac-moonaxis
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: azure-rbac
Source: https://github.com/MoonAxis/azure-stack/tree/main/skills/azure-rbac
Command: npx skills add https://github.com/MoonAxis/azure-stack --skill azure-rbac-moonaxis

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps users identify the most appropriate Azure Role-Based Access Control (RBAC) role for a given identity, ensuring adherence to the principle of least privilege. It also automates the generation of necessary CLI commands and Bicep code for role assignment.

Core Features & Use Cases

  • Role Identification: Determines the correct built-in or custom RBAC role based on required permissions.
  • Command Generation: Creates Azure CLI commands to assign the identified role to a specified identity.
  • Bicep Code Snippet: Provides Bicep code for declarative role assignment, incorporating Azure best practices.
  • Use Case: A user needs to grant an Azure Function's managed identity read-only access to Azure Blob Storage. This skill will find the appropriate 'Storage Blob Data Reader' role and generate the CLI command and Bicep code to assign it.

Quick Start

Find the least privilege role for an identity to read blobs and generate the CLI command to assign it.

Frequently Asked Questions about azure-rbac

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find the least privilege Azure RBAC role for reading blobs?

To assign least privilege Azure RBAC roles for reading blobs, this Skill identifies the appropriate built-in role like 'Storage Blob Data Reader' based on your specified permissions and required access level.

Can I generate Bicep code for Azure role assignments?

Yes, you can generate Bicep code for Azure role assignments that incorporates best practices, allowing you to declaratively assign the identified RBAC roles to specified managed identities within your infrastructure templates.

How do I assign a custom Azure RBAC role definition using CLI?

You can assign custom Azure RBAC role definitions by providing your required permissions, and this Skill will generate the corresponding Azure CLI commands to create the custom role and assign it to a target identity.

What is the best way to grant a managed identity access to Azure resources?

The best way to grant managed identity access is by identifying the correct built-in or custom Azure RBAC role for least privilege, then using the generated CLI commands or Bicep code snippets to execute the role assignment.

Does this support creating custom Azure role definitions instead of built-in roles?

Yes, it supports creating custom Azure role definitions by generating the necessary Bicep code and CLI commands based on user-specified permissions, ensuring precise access control when built-in roles do not fit your requirements.