azure-role-selector

Identify the minimal Azure role for requested permissions with CLI and IaC assignment steps.

Updated Mar 18, 2026

Search Tags:#cli #azure #rbac #iam #bicep #least-privilege #role-assignment

Ready to run

npx skills add https://github.com/angryconsultant/Copilot-CLI --skill azure-role-selector-angryconsultant

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: azure-role-selector
Source: https://github.com/angryconsultant/Copilot-CLI/tree/main/skills/azure-role-selector
Command: npx skills add https://github.com/angryconsultant/Copilot-CLI --skill azure-role-selector-angryconsultant

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

When managing Azure identities, determining the exact role needed to satisfy permissions with the least privilege can be time-consuming and error-prone.

Core Features & Use Cases

Role recommendations: Suggests built-in roles or creates a minimal custom role to meet the required permissions.
Assignment guidance: Provides CLI commands and IaC snippets to apply the chosen role to the identity.
Use Case: Ideal for security-conscious deployments where least privilege access is essential and role boundaries must be explicit.

Quick Start

Ask it to identify the minimal built-in or custom Azure role that satisfies the requested permissions and how to assign it.

Frequently Asked Questions about azure-role-selector

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I determine the minimal Azure role for least-privilege access?▼

To determine the minimal Azure role for least-privilege access, request role recommendations based on your required permissions. The tool evaluates the permissions and suggests a suitable built-in role or generates a minimal custom role definition.

How do I assign Azure RBAC roles using Bicep and CLI?▼

Assign Azure RBAC roles using Bicep and CLI by requesting assignment guidance after identifying the correct role. The tool provides ready-to-use CLI commands and Infrastructure as Code snippets to apply the chosen role to your target identity.

What is the best way to create a custom Azure role for specific permissions?▼

The best way to create a custom Azure role for specific permissions is to define the exact required actions and let the selector generate a minimal custom role. This ensures deterministic role selection with safety checks and validation before assignment.

Does this approach provide Infrastructure as Code snippets for Azure IAM role assignments?▼

Yes, this approach provides Infrastructure as Code snippets for Azure IAM role assignments. It generates IaC snippets alongside CLI commands, ensuring security-conscious deployments have explicit role boundaries applied directly through automation.

Can I get CLI generation for Azure role assignments without writing commands manually?▼

Yes, you can get CLI generation for Azure role assignments without writing commands manually. The selector outputs deterministic CLI commands and assignment steps tailored to the identity and the minimal role required.

When should I use a custom Azure role instead of a built-in role?▼

You should use a custom Azure role instead of a built-in role when no existing role strictly satisfies your required permissions. The selector applies least-privilege principles to recommend built-in roles first, then generates a custom role if needed.