azure-role-selector

To find least-privilege Azure RBAC roles, describe the required permissions for your resources. The skill identifies matching built-in roles to minimize excess access and outputs ready-to-use Azure CLI or ARM template snippets for assignment.

Yes, you can generate Azure CLI commands for assigning RBAC roles to managed identities and service principals. Provide the required permissions, and the skill produces ready-to-use assignment commands tailored for common principals.

Least-privilege RBAC restricts access by assigning only the permissions necessary for a task. It reduces over-privilege risk by matching required resource permissions to specific built-in roles, avoiding excessive access during security analysis.

You should define a custom Azure role definition when no built-in role matches your exact required permissions. The skill suggests custom role paths during security analysis to maintain least-privilege when built-in roles provide excess access.

To integrate Azure RBAC role selection into CI/CD pipeline configuration, apply the skill during deployment to validate required permissions. It outputs ready-to-use Azure CLI or ARM template snippets to enforce security governance automatically.