azure-rbac

Use the 'azuredocumentation' tool to find the minimal role definition that matches the desired permissions the user wants to assign to an identity. If no built-in role matches the desired permissions, use the 'azureextensioncligenerate' tool to create a custom role definition with the desired permissions. Then use the 'azureextensioncligenerate' tool to generate the CLI commands needed to assign that role to the i...

Helps users find the right Azure RBAC role for an identity with least privilege access, then generate CLI commands and Bicep code to assign it. USE FOR: "what role should I assign", "least privilege role", "RBAC role for", "role to read blobs", "role for managed identity", "custom role definition", "assign role to identity". DO NOT USE FOR: creating or configuring managed identities, or general Azure security hardening; those are out of scope for this role-selection skill. Source: microsoft/github-copilot-for-azure.