azure-rbac

Helps users find the right Azure RBAC role for an identity with least privilege access, then generate CLI commands and Bicep code to assign it. Also provides guidance on permissions required to grant roles. WHEN: bicep for role assignment, what role should I assign, least privilege role, RBAC role for, role to read blobs, role for managed identity, custom role definition, assign role to identity, what role do I need to grant access, permissions to assign roles. User Access Administrator (least privilege - recommended for role assignment only) Owner (full access including role assignment)

To assign RBAC roles to identities, you need a role that includes the Microsoft.Authorization/roleAssignments/write permission. The most common roles with this permission are:

Run: npx -y skills add https://github.com/microsoft/azure-skills --skill azure-rbac --agent claude-code — the source lives at github.com/microsoft/azure-skills.