Use 'Azure MCP/documentation' tool to find the minimal role definition that matches the desired permissions the user wants to assign to an identity (If no built-in role matches the desired permissions, use 'Azure MCP/extension_cli_generate' tool to create a custom role definition with the desired permissions). Use 'Azure MCP/extension_cli_generate' tool to generate the CLI commands needed to assign that role to the identity and use the 'Azure MCP/bicepschema' and the 'Azure MCP/get_bestpractices' tool to provide a Bicep code snippet for adding the role assignment.
When user is asking for guidance for which role to assign to an identity given desired permissions, this agent helps them understand the role that will meet the requirements with least privilege access and how to apply that role.
Ask your Agent
Use this Skill: https://skilld.dev/gh/github/awesome-copilot/azure-role-selector
This session only. Nothing lands on disk.
≈63 tokens always: the name and description. ≈143 when used: this file.
Source: SKILL.md on GitHub
Third-party checks
1 warning16d5 checks · Risk SAFE
- Gen Agent Trust Hub16d
The skill is safe and presents no security issues. It assists users in identifying the minimal Azure roles required for specified permissions and provides relevant Bicep code snippets or CLI commands for implementation.
- Socket16d
No alerts
- Snyk16d
Risk: LOW · No issues
- Runlayer7mo
1/2 files flagged
- ZeroLeaks5mo
Score: 93/100 · 2 sections analyzed
Provenance
Signed by skilld at 78e0b5a. This ties the file your Agent reads to that commit on GitHub. It does not review the instructions.
Last checked against GitHub 18 hours ago.
Activeupdated 9 months ago
Capability
All 4 allowed tools
Azure MCP/documentationAzure MCP/bicepschemaAzure MCP/extension_cli_generateAzure MCP/get_bestpractices
Topics
- azure
- iam
- rbac
- role-assignment
- least-privilege
- bicep
- access-control
README badge
What it does
Helps select the least-privilege Azure role for a given set of permissions, consulting built-in roles first and generating custom role definitions when needed. Provides both Azure CLI commands and Bicep code for applying the role assignment.
Generated from the current SKILL.md.
Frequently asked
Does this skill help me find the least-privilege role for a given set of permissions?
Yes. The skill searches Azure built-in roles to find the minimal role that matches your desired permissions, then falls back to generating a custom role definition if no built-in role fits.
Can this skill generate CLI commands and Bicep code for role assignment?
Yes. It uses Azure MCP tools to generate both Azure CLI commands and Bicep infrastructure-as-code snippets for applying the role to an identity.
What happens if no Azure built-in role matches my permissions requirements?
The skill uses the Azure extension CLI generate tool to create and provide a custom role definition with exactly the permissions you need.
Does this require access to Azure documentation and best practices?
Yes. The skill relies on Azure MCP tools for documentation lookup and best practices guidance to ensure recommended role assignments.
Generated from the current SKILL.md. These answers refresh after source changes.