What problem does it solve? Choosing the correct Azure RBAC role for an identity is difficult: built-in roles are numerous, over-privileged assignments create security risk, and writing the assignment commands or Bicep by hand is error-prone. This Skill identifies the minimal role matching the permissions you need and produces the commands to assign it. ## Core Features & Use Cases - Least-Privilege Role Selection: Searches Azure documentation to find the built-in role with the minimum permissions matching your requirements. - Custom Role Generation: Creates a custom role definition when no built-in role fits the desired permission set. - Assignment Code Output: Generates Azure CLI commands and a Bicep snippet for assigning the role to an identity, plus guidance on the permissions (such as Microsoft.Authorization/roleAssignments/write) required to grant roles. - Use Case: You need a managed identity to read blobs from a storage account. Ask which role to assign, and receive the least-privilege role recommendation, the CLI assignment command, and the Bicep role assignment block. ## Quick Start Ask which Azure RBAC role a managed identity needs to read blobs from a storage account and request the CLI command and Bicep code to assign it.
