azure-rbac

Generate Azure RBAC role assignment CLI commands and Bicep snippets.

Updated Aug 23, 2026
One-click install
npx skills add https://github.com/rrbanda/skills --skill azure-rbac-rrbanda
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: azure-rbac
Source: https://github.com/rrbanda/skills/tree/main/skills/cloud-infra/azure-rbac
Command: npx skills add https://github.com/rrbanda/skills --skill azure-rbac-rrbanda

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps determine the minimal Azure RBAC role necessary for an identity, then provides CLI commands and a Bicep code snippet to apply the assignment, while clarifying required permissions to grant such roles.

Core Features & Use Cases

  • Role minimization: Identify built-in or custom roles that grant the least privileges needed.
  • Command generation: Produce CLI commands to assign the role to an identity.
  • Infrastructure code: Provide a Bicep snippet for adding the role assignment.
  • Guidance: Include prerequisites and permissions needed for role assignments.

Quick Start

Ask it to determine the minimal Azure RBAC role for an identity and generate the necessary CLI and Bicep outputs.

Frequently Asked Questions about azure-rbac

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I assign the least-privilege Azure RBAC role to an identity?

Assigning the least-privilege Azure RBAC role requires identifying the minimal built-in or custom role for an identity, then generating CLI commands and a Bicep snippet to apply the assignment while ensuring governance.

What permissions are needed to grant Azure role assignments?

Granting Azure role assignments requires the Microsoft.Authorization/roleAssignments/write permission. This Skill clarifies these required permissions and prerequisites before generating the assignment commands.

Can I generate Bicep code for assigning an Azure RBAC role?

Yes, you can generate Bicep code for Azure RBAC role assignment. This Skill produces a Bicep snippet that adds the permission grant to your infrastructure code for the selected least-privilege role.

What is the best way to minimize Azure role permissions for an identity?

The best way to minimize Azure role permissions is role minimization, which identifies built-in or custom roles that grant only the least privileges needed for an identity. This Skill automates that selection process.

Does this approach work with both built-in and custom Azure RBAC roles?

Yes, this approach works with both built-in and custom Azure RBAC roles. It determines the minimal role necessary across Azure environments and provides the CLI commands to assign it.