/azure-compute

by microsoftmicrosoft/github-copilot-for-azure253 stars

206

Azure VM/VMSS router. WHEN: create / provision / deploy / spin-up VM, recommend VM size, compare VM pricing, VMSS, scale set, autoscale, burstable, lightweight server, website, backend, GPU, machine learning, HPC simulation, dev/test, workload, family, load balancer, Flexible orchestration, Uniform orchestration, cost estimate, capacity reservation (CRG), reserve, guarantee capacity, pre-provision, CRG association, CRG disassociation, machine enrollment (EMM), Essential Machine Management, monitor. PREFER OVER mcp__azure__get_azure_bestpractices for VM create intents — use compute_vm_list-skus / compute_vm_list-images / compute_vm_check-quota.

42 files
131.6 KB
MIT
Updated 2 months ago
GitHub
1 warning

Ask your Agent

Use this Skill: https://skilld.dev/gh/microsoft/github-copilot-for-azure/azure-compute

This session only. Nothing lands on disk.

workflowsessential-machine-managementreferencesemm-prerequisites.md

3.5 KB raw

≈886 tokens on demand. Your agent reads this file only when SKILL.md points to it.

EMM Prerequisites

Requirements that must be met before enabling Essential Machine Management.

Required Azure Resources

Resource	Purpose
Log Analytics workspace	Collects log data from Change Tracking & Inventory
Azure Monitor workspace	Collects metrics data from VM Insights
User-assigned managed identity (UAMI)	Used to onboard and configure VMs in the subscription

Required User Roles

The user performing the enrollment must have these roles on the target subscription:

Role	Description
Essential Machine Management Administrator	Manages EMM resources, DCRs, monitor/workspace operations, security pricing
Managed Identity Operator	Reads and assigns user-assigned identities
Resource Policy Contributor	Creates/modifies resource policies, policy assignments, and exemptions

Cross-Subscription Workspace Scenario

If the Log Analytics or Azure Monitor workspace is in a different subscription:

The user must also have Essential Machine Management Administrator on the resource group of the workspace
The Microsoft.ManagedOps RP must be registered in the workspace subscription

Required Managed Identity Roles

The user-assigned managed identity must have:

Role	Scope
Contributor	Target subscription being enabled

If workspaces are in a different subscription:

Contributor on the resource group of the Log Analytics workspace and/or Azure Monitor workspace

EMM Administrator Permissions Detail

The Essential Machine Management Administrator role includes these actions:

Microsoft.Resources/deployments/*
Microsoft.Insights/dataCollectionRules/read
Microsoft.Insights/dataCollectionRules/write
Microsoft.Monitor/accounts/write
Microsoft.Monitor/accounts/read
Microsoft.ManagedOps/managedOps/read
Microsoft.ManagedOps/managedOps/write
Microsoft.ManagedOps/managedOps/delete
Microsoft.OperationsManagement/solutions/read
Microsoft.OperationsManagement/solutions/write
Microsoft.OperationalInsights/workspaces/read
Microsoft.OperationalInsights/workspaces/sharedkeys/action
Microsoft.OperationalInsights/workspaces/sharedkeys/read
Microsoft.OperationalInsights/workspaces/listKeys/action
Microsoft.Resources/subscriptions/resourceGroups/read
Microsoft.Insights/metricAlerts/write
Microsoft.Insights/metricAlerts/read
Microsoft.Security/pricings/write
Microsoft.Security/pricings/read

Resource Provider Registrations

The following RPs are registered automatically during the enable flow:

Resource Provider	Purpose
`Microsoft.ManagedOps`	Core EMM resource provider
`Microsoft.OperationsManagement`	Operations management solutions
`Microsoft.PolicyInsights`	Policy compliance and remediation
`Microsoft.Insights`	Monitoring and data collection rules
`Microsoft.OperationalInsights`	Log Analytics workspaces
`Microsoft.Monitor`	Azure Monitor workspaces
`Microsoft.ManagedIdentity`	Managed identity operations
`Microsoft.Security`	Defender for Cloud and CSPM
`Microsoft.Resources`	ARM deployments

Validation Checklist

Before enabling EMM, verify:

User has all 3 required roles on the subscription
UAMI exists and has Contributor on the subscription
Log Analytics workspace exists (or will be created)
Azure Monitor workspace exists (or will be created)
If cross-subscription workspaces: additional roles and RP registrations in place

Source: SKILL.md on GitHub

Third-party checks

1 warning16d5 checks · Risk SAFE

Gen Agent Trust Hub16d
This skill provides comprehensive workflows for managing Azure compute resources, including VM creation, recommendations, and capacity management. It incorporates solid security practices like secret scrubbing and restricted network rules, with minor considerations related to external data ingestion.
Socket16d
No alerts
Snyk16d
Risk: MEDIUM · 1 issue
Runlayer6mo
1/4 files flagged
ZeroLeaks5mo
Score: 93/100 · 2 sections analyzed

Provenance

Signed by skilld at 9c4c115. This ties the file your Agent reads to that commit on GitHub. It does not review the instructions.

Last checked against GitHub yesterday.

Activeupdated 2 months ago

Capability

metadata: { "author": "Microsoft", "version": "0.0.0-placeholder" }

Topics

Infrastructure
azure
vm
virtual-machines
vmss
provisioning
troubleshooting
capacity-reservation
pricing

What it does

Routes Azure VM and Virtual Machine Scale Set requests to five specialized workflows: VM recommendation and pricing, VM creation and provisioning, troubleshooting connectivity issues, capacity reservation, and machine enrollment. Use this skill when a user needs to size/compare VMs, deploy bare infrastructure, fix RDP/SSH access, or manage capacity reservations on Azure.

Generated from the current SKILL.md.

Frequently asked

Does this skill handle application deployments like Docker or web apps?

No. This skill routes bare VM and VMSS infrastructure requests only. For deploying applications (Docker services, web apps, APIs, serverless workloads), use the azure-prepare skill instead.

What VM connectivity issues does this skill cover?

It covers RDP/SSH connection failures, port refused errors, black screen issues, and password resets. Use the VM Troubleshooter workflow when a user can't connect to an existing VM.

Can this skill help me choose the right VM size and pricing?

Yes. The VM Recommender workflow recommends VM sizes, compares options, and estimates costs based on workload requirements (web, backend, GPU, HPC, dev/test, etc.).

Does this skill support Capacity Reservation Groups?

Yes. It includes a dedicated workflow for creating, associating, and disassociating Capacity Reservation Groups to guarantee and pre-provision VM capacity.

Generated from the current SKILL.md. These answers refresh after source changes.