Azure Role Selector

When you're setting up Azure permissions and don't want to accidentally give someone the keys to the kingdom, this skill walks you through finding the minimal role that matches your requirements. It searches Azure's built-in roles first, generates custom role definitions if nothing fits, then spits out both CLI commands and Bicep snippets to actually apply the assignment. Honestly, it's the kind of thing that saves you from either over-permissioning users or spending an hour digging through Microsoft's role documentation trying to figure out if "Storage Blob Data Reader" includes what you actually need.

skills.sh installs: 9.4K
GitHub stars: 41K
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add github/awesome-copilot --skill azure-role-selector --agent claude-code

Installs into .claude/skills of the current project.

Files

Use 'Azure MCP/documentation' tool to find the minimal role definition that matches the desired permissions the user wants to assign to an identity (If no built-in role matches the desired permissions, use 'Azure MCP/extension_cli_generate' tool to create a custom role definition with the desired permissions). Use 'Azure MCP/extension_cli_generate' tool to generate the CLI commands needed to assign that role to the identity and use the 'Azure MCP/bicepschema' and the 'Azure MCP/get_bestpractices' tool to provide a Bicep code snippet for adding the role assignment.

SKILL.md on GitHub

Sponsors

Promote your product hereReach 125k+ visitors monthly Promote your product hereReach 125k+ visitors monthly