skills.rest
ajilantony
ajilantonyCOMMUNITY
Explore all skills by this author →
GitHub

azure-role-selector

Identify least-privilege Azure roles and generate CLI commands and Bicep code.

1|Updated Feb 15, 2026
Search Tags:#cli#permissions#azure#rbac#roles#least privilege#bicep
One-click install
npx skills add https://github.com/ajilantony/copilot-agentops --skill azure-role-selector-ajilantony
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: azure-role-selector
Source: https://github.com/ajilantony/copilot-agentops/tree/main/skills/azure-role-selector
Command: npx skills add https://github.com/ajilantony/copilot-agentops --skill azure-role-selector-ajilantony

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps users identify the most appropriate Azure role for an identity based on required permissions, ensuring the principle of least privilege is applied.

Core Features & Use Cases

  • Role Identification: Determines the built-in Azure role that best matches specified permissions.
  • Custom Role Generation: Creates a custom role definition if no suitable built-in role exists.
  • CLI Command Generation: Provides commands to assign the identified or custom role.
  • Bicep Snippet Generation: Offers Bicep code for role assignment.
  • Use Case: A developer needs to grant read-only access to a specific storage account. This Skill will identify the Storage Blob Data Reader role and provide the CLI command and Bicep code to assign it.

Quick Start

Find the least privilege role for an identity that needs to read and write to Azure SQL databases.

Frequently Asked Questions about azure-role-selector

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find the least-privilege Azure role for a specific identity?▼

To find the least-privilege Azure role, this Skill identifies the built-in role that best matches your specified permissions and generates the necessary CLI commands and Bicep code for assignment. It ensures you apply only the necessary permissions to an identity.

What is the best way to assign Azure RBAC roles using Bicep?▼

The best way to assign Azure RBAC roles using Bicep is to identify the exact built-in role needed and generate a Bicep snippet for role assignment. This Skill outputs ready-to-deploy Bicep code alongside CLI commands for the selected identity.

How do I create a custom Azure role when no built-in role fits my permissions?▼

You create a custom Azure role by specifying the exact permissions required. This Skill generates a custom role definition with those specific permissions, along with the corresponding CLI commands and Bicep code for assignment.

Can I generate Azure CLI commands for role assignment?▼

Yes, you can generate Azure CLI commands for role assignment. The Skill provides the exact CLI commands needed to assign either a recommended built-in role or a generated custom role to a target identity.

When should I use a custom Azure role instead of a built-in role?▼

You should use a custom Azure role when no suitable built-in role exists for your required permissions. This Skill determines if a built-in role matches your needs and falls back to creating a custom role definition to maintain least privilege.

Related Skills

Explore More Software Engineering Skills→
jorgeasaurusjorgeasaurus
12

azure-rbac

Determine Azure RBAC roles and generate CLI and Bicep assignment code.

Community
Intermediate
jongiojongio
6

azure-role-selector

Identifies least-privilege Azure RBAC built-in or custom roles and generates CLI/Bicep assignments.

Community
Intermediate
ncksolncksol
1

azure-role-selector

Identify the least-privilege Azure role for required permissions.

Community
Advanced
microsoftmicrosoft
242

azure-role-selector

Identify least-privilege Azure RBAC roles and generate CLI and Bicep assignment snippets.

Official
Intermediate