azure-role-selector

To find the least-privilege Azure RBAC role, the Skill locates the smallest built-in role matching your requested permissions for a service principal. It searches Azure documentation and falls back to custom role generation if no built-in role fits.

The best way to assign an Azure RBAC role to a managed identity is using generated CLI commands or Bicep code. The Skill outputs ready-to-run assignment snippets that apply minimal built-in roles directly to your target identity across Azure resources.

Yes, you can use Bicep to deploy Azure RBAC role assignments. The Skill generates declarative Bicep infrastructure code for reproducible deployments, allowing you to apply least-privilege role assignments to users, service principals, or managed identities.

To create a custom Azure role when built-in roles lack the right permissions, the Skill utilizes the Azure CLI extension to generate a custom role definition. This ensures you maintain least-privilege access when standard built-in roles do not fit your scenario.

Yes, the Azure role assignment process supports both users and automation identities. The Skill applies least-privilege RBAC role discovery and assignment across Azure resources for users, service principals, and managed identities requiring access grants.

You should use Bicep over CLI commands for Azure RBAC assignments when you need reproducible infrastructure deployments. The Skill generates both CLI commands for immediate execution and Bicep snippets for declarative, repeatable role assignment across environments.