azure-role-selector

What problem does it solve?

This Skill helps identify the least-privilege Azure role required for an identity based on a given set of permissions, reducing access risk while ensuring necessary capabilities are available.

Core Features & Use Cases

• Minimal role discovery: Finds built-in Azure roles that satisfy the permission requirements.
• Custom role guidance: Provides steps to create a custom role definition when no built-in role fits the needs.
• Guided provisioning: Outputs CLI commands to assign roles and Bicep templates for infrastructure deployment, along with best-practice recommendations.

Quick Start

Provide the target identity (e.g., a service principal or user) and the list of required permissions. The Skill will propose the least-privilege role and generate the steps to apply it, including CLI commands and a Bicep snippet.