azure-role-selector

To determine the minimal Azure role for least-privilege access, request role recommendations based on your required permissions. The tool evaluates the permissions and suggests a suitable built-in role or generates a minimal custom role definition.

Assign Azure RBAC roles using Bicep and CLI by requesting assignment guidance after identifying the correct role. The tool provides ready-to-use CLI commands and Infrastructure as Code snippets to apply the chosen role to your target identity.

The best way to create a custom Azure role for specific permissions is to define the exact required actions and let the selector generate a minimal custom role. This ensures deterministic role selection with safety checks and validation before assignment.

Yes, this approach provides Infrastructure as Code snippets for Azure IAM role assignments. It generates IaC snippets alongside CLI commands, ensuring security-conscious deployments have explicit role boundaries applied directly through automation.

Yes, you can get CLI generation for Azure role assignments without writing commands manually. The selector outputs deterministic CLI commands and assignment steps tailored to the identity and the minimal role required.

You should use a custom Azure role instead of a built-in role when no existing role strictly satisfies your required permissions. The selector applies least-privilege principles to recommend built-in roles first, then generates a custom role if needed.