skills.rest
tfsugjp
tfsugjpOFFICIAL
Explore all skills by this author →
GitHub

azure-role-selector

Identify minimal Azure roles granting required permissions with least privilege outputs CLI commands and Bicep snippets.

3|Updated Jul 25, 2025
Search Tags:#azure#rbac#cloud#identity#least-privilege#role-assignment
One-click install
npx skills add https://github.com/tfsugjp/csharptemplate --skill azure-role-selector-tfsugjp
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: azure-role-selector
Source: https://github.com/tfsugjp/csharptemplate/tree/main/.github/skills/azure-role-selector
Command: npx skills add https://github.com/tfsugjp/csharptemplate --skill azure-role-selector-tfsugjp

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill guides users to determine the minimal Azure role that satisfies required permissions for an identity while enforcing least privilege.

Core Features & Use Cases

  • Role discovery: Identify built-in roles that meet permission requirements or generate a custom role when no exact match exists.
  • Guided assignment: Provide CLI commands and infrastructure snippets (Bicep) to implement the role assignment securely.
  • Use Case: During identity provisioning or access-control audits, ensure the assigned role grants only necessary permissions.

Quick Start

Simply specify the identity and permissions requirements, and the skill will return the recommended role along with the necessary assignment steps.

Frequently Asked Questions about azure-role-selector

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find the least-privilege Azure role for an identity?▼

To find the least-privilege Azure role, specify the identity and required permissions. The skill identifies the minimal built-in role matching your needs or generates a custom role to enforce strict access control.

What is the best way to generate a custom Azure role when built-in roles are too broad?▼

Generating a custom Azure role is handled via extension_cli_generate when no exact built-in match exists. This creates a tailored role definition granting only the specific permissions required by the identity.

How do I implement Azure role assignments using Bicep and CLI?▼

Implementing Azure role assignments is done by outputting ready-to-use CLI commands and a Bicep snippet. These artifacts securely apply the discovered least-privilege role to the target identity across Azure resources.

When do I need to audit Azure role assignments for least privilege?▼

Auditing Azure role assignments for least privilege is needed during identity provisioning and access-control reviews. It ensures existing identities retain only the minimal required permissions across Azure resources.

Can I use this skill to reassign Azure roles during access-control audits?▼

Yes, you can reassign Azure roles during access-control audits. The skill applies during role reassignment to identify and enforce the minimal permissions required for an identity across your cloud resources.

Related Skills

Explore More Software Engineering Skills→
usepowershellusepowershell
9

azure-role-selector

Determine minimal Azure roles and generate CLI and Bicep assignment snippets.

Community
Intermediate
microsoftmicrosoft
2.9k

azure-rbac

Identify minimal Azure RBAC roles and generate CLI and Bicep assignment artifacts.

Official
Advanced
qprjack86qprjack86

azure-rbac

Identify least-privilege Azure RBAC roles and generate Azure CLI and Bicep assignment code.

Community
Advanced
davidrrowleydavidrrowley

azure-rbac

Generate minimal Azure RBAC role assignments with az CLI and Bicep snippets.

Community
Intermediate