azure-rbac
Official sourceFinds the least-privilege Azure RBAC role for an identity and generates the CLI commands and Bicep to assign it, including custom role definitions when no built-in fits.
Source: Microsoft
At a glance
Verified source- Best for
- Picking the minimal built-in role for a managed identity or user
- Works with
- GitHub Copilot · Claude Code
- Outcome
- Generating az role assignment commands and Bicep snippets
- Source
- microsoft/github-copilot-for-azure
01 / Understand the skill
About azure-rbac
Helps users find the right Azure RBAC role for an identity with least privilege access, then generate CLI commands and Bicep code to assign it. Also provides guidance on permissions required to grant roles. WHEN: bicep for role assignment, what role should I assign, least privilege role, RBAC role for, role to read blobs, role for managed identity, custom role definition, assign role to identity, what role do I need to grant access, permissions to assign roles.
Helps users find the right Azure RBAC role for an identity with least privilege access, then generate CLI commands and Bicep code to assign it. Also provides guidance on permissions required to grant roles.
Read full description
Helps users find the right Azure RBAC role for an identity with least privilege access, then generate CLI commands and Bicep code to assign it. Also provides guidance on permissions required to grant roles. WHEN: bicep for role assignment, what role should I assign, least privilege role, RBAC role for, role to read blobs, role for managed identity, custom role definition, assign role to identity, what role do I need to grant access, permissions to assign roles.
02 / Confirm the fit
Use azure-rbac when you need to
- Picking the minimal built-in role for a managed identity or user
- Generating az role assignment commands and Bicep snippets
- Defining a custom role when no built-in matches
- Understanding the permissions needed to grant roles
03 / See the workflow
How azure-rbac works
- 01Install: npx skills add https://github.com/microsoft/github-copilot-for-azure --skill azure-rbac
- 02Try: What least-privilege role lets my managed identity read blobs, and give me the Bicep?
- 03Get: A minimal role recommendation with assignment CLI commands and a Bicep snippet.
Check before installing
Compatible platforms
GitHub Copilot · Claude Code
Best fit
Picking the minimal built-in role for a managed identity or user
Review the source instructions if the required output differs from the formats described above.
Install and use
Compatible with GitHub Copilot and Claude Code · Published by Microsoft
Ready to add azure-rbac?
Use the published instructions below, then provide the required input and describe the result you need.
General instructions · GitHub Copilot · Claude Code
npx skills add https://github.com/microsoft/github-copilot-for-azure --skill azure-rbac
Review the source repository and license before installing third-party skills.
Continue exploring
Similar skills
Provisions Microsoft Entra Agent Identity Blueprints, BlueprintPrincipals, and per-instance agent identities via Graph, wiring OAuth fmi_path token exchange and per-agent permissions.
Deploys and manages Vercel projects using token-based auth read from the environment, covering deploy, env vars, domains, and inspection without interactive login.
Guides Microsoft Entra ID app registration, OAuth 2.0 setup, API permissions, client credentials, and MSAL integration via portal, CLI, or Bicep.
Runs Azure compliance and security audits with azqr plus Key Vault expiration checks, classifying findings by priority and proposing remediation across resources and certs.