skills.rest
jongio
jongioCOMMUNITY
Explore all skills by this author →
Website𝕏@jongallantGitHub

azure-role-selector

Identifies least-privilege Azure RBAC built-in or custom roles and generates CLI/Bicep assignments.

6|3|Updated Feb 9, 2026
Search Tags:#security#azure#rbac#least privilege#bicep#role assignment
One-click install
npx skills add https://github.com/jongio/azd-copilot --skill azure-role-selector-jongio
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: azure-role-selector
Source: https://github.com/jongio/azd-copilot/tree/main/cli/src/internal/assets/ghcp4a-skills/azure-role-selector
Command: npx skills add https://github.com/jongio/azd-copilot --skill azure-role-selector-jongio

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps users identify the most restrictive Azure RBAC role needed for an identity, ensuring adherence to the principle of least privilege and reducing security risks.

Core Features & Use Cases

  • Role Identification: Determines the minimal built-in Azure RBAC role for specific permissions.
  • Custom Role Generation: Creates custom role definitions when no built-in role is suitable.
  • Role Assignment: Generates CLI commands and Bicep code to assign the identified or custom role.
  • USE FOR: "what role should I assign", "least privilege role", "RBAC role for", "role to read blobs", "role for managed identity", "custom role definition", "assign role to identity".
  • DO NOT USE FOR: creating managed identities (use azure-security), general security hardening (use azure-security-hardening), networking permissions (use azure-networking).

Quick Start

Use the azure role selector skill to find the least privilege role for an identity to read blobs.

Frequently Asked Questions about azure-role-selector

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find the least privilege Azure RBAC role for a managed identity to read blobs?▼

The azure-role-selector skill identifies the minimal built-in Azure RBAC role for an identity to read blobs. It enforces least privilege principles by matching specific permissions to the most restrictive role available, preventing over-privileged access.

Can I generate Bicep code and CLI commands for Azure role assignments?▼

Yes, you can generate Bicep code and CLI commands for Azure role assignments. The skill outputs the necessary infrastructure as code and command-line scripts to assign the identified least privilege or custom RBAC role to your target identity.

How do I create a custom Azure RBAC role definition when no built-in role fits?▼

When no built-in role fits, the skill generates a custom Azure RBAC role definition. This allows you to define precise permissions tailored to your specific resource access requirements, maintaining strict least privilege principles.

What is the principle of least privilege in Azure RBAC and when should I apply it?▼

The principle of least privilege in Azure RBAC involves assigning identities the most restrictive role needed to perform their tasks. You should apply it to reduce security risks and enforce strict access control for Azure resources.

Should I use this skill for general Azure security hardening or creating managed identities?▼

You should not use this skill for creating managed identities or general security hardening. It is specifically designed for finding least privilege RBAC roles and generating role assignments, not networking permissions or broader security configurations.

Related Skills

Explore More Software Engineering Skills→
Ditto190Ditto190

azure-role-selector

Identify minimal Azure RBAC roles and generate CLI and Bicep assignments.

Community
Intermediate
jorgeasaurusjorgeasaurus
12

azure-rbac

Determine Azure RBAC roles and generate CLI and Bicep assignment code.

Community
Intermediate
ivegamsftivegamsft

azure-identity

Design Azure identity solutions with RBAC, managed identities, and conditional access templates.

Community
Advanced
sitharaj88sitharaj88
1

azure-rbac

Generate Azure RBAC assignments, custom roles, managed identities, and policies in Bicep, Terraform, and Azure CLI.

Community
Advanced