Skip to main content
affpapa.org
RU EN
skill GitHub Copilot official · GitHub

azure-role-selector — GitHub Copilot skill: Azure roles

This skill selects an Azure role with the least privilege needed for an identity and shows how to assign it. Use it when Azure access needs a careful RBAC match.

Install into GitHub Copilot · Skills CLI (Vercel) All methods and platforms ↓ 
npx skills add github/awesome-copilot --skill azure-role-selector
Open on GitHub

What azure-role-selector does

azure-role-selector maps an identity’s requested permissions to a built-in Azure role with the smallest matching access set. When no built-in role fits, the skill creates a custom role definition for those permissions.

It then generates CLI commands for assigning the role and a Bicep snippet for the role assignment. The workflow uses Azure MCP/documentation, Azure MCP/extension_cli_generate, Azure MCP/bicepschema, and Azure MCP/get_bestpractices.

Install it if you manage Azure RBAC through GitHub Copilot and want the requested access checked before assignment. It is unnecessary for work outside Azure role and identity permissions.

What it helps with

  • match an Azure role to an identity’s permissions
  • find the built-in role with the least required access
  • create a custom role when no built-in role matches
  • generate CLI commands for a role assignment
  • add the role assignment to Bicep

Example prompts for the agent

  • Find the least-privilege Azure role for this identity and these requested permissions: ...
  • Check whether a built-in role matches this permission set. If it does not, create a custom role and provide the CLI commands.
  • Generate a Bicep snippet that assigns the selected role to this identity.

How to install azure-role-selector

1Skills CLI (Vercel)

npx skills add github/awesome-copilot --skill azure-role-selector

2GitHub CLI

gh skill install github/awesome-copilot azure-role-selector

3Manually: put the files in place

.github/skills/azure-role-selector/SKILL.md

From the same set554

The whole set →
git-commit official github This skill reviews Git changes, stages related files, and creates Conventional Commits. Use it when you want an agent to make one commit or split work into separate commits. GitHub Copilot 47,165installs excalidraw-diagram-generator official github Turn a plain-language description into an Excalidraw diagram. Useful for mapping processes, system structure, and relationships between entities. GitHub Copilot 31,639installs multi-stage-dockerfile official github This skill guides GitHub Copilot in writing multi-stage Dockerfiles for different languages and frameworks. Use it when the final runtime image should contain fewer build dependencies. GitHub Copilot 29,688installs documentation-writer official github Skill that turns the agent into a technical writer following the Diátaxis framework: tutorials, how-to guides, reference, and explanation. Proposes structure before writing. GitHub Copilot 27,757installs prd official github Turns a feature idea into a structured PRD with user stories, technical requirements, and risks. Use it when planning a software feature or an AI-powered one. GitHub Copilot 24,035installs refactor official github This skill reshapes existing code without changing its external behavior. Use it for gradual cleanup of large functions, duplication, weak types, and code smells. GitHub Copilot 22,321installs java-springboot official github Gives GitHub Copilot Spring Boot development practices, from project layout to tests and security. Use it when writing or reviewing Java application code. GitHub Copilot 21,272installs create-readme official github This skill reviews a project and creates a structured README.md. Use it when the repository needs clear documentation based on its actual files and code. GitHub Copilot 19,081installs

Similar

agent-platform-migrate-from-ai-studio official google Guides a Gemini API migration from Google AI Studio to Gemini Enterprise Agent Platform. Use it when the app needs Google Cloud billing, IAM, or shared infrastructure. Claude Code Gemini CLI CX Codex 7,934installs security-requirement-extraction Seth Hobson Turns a threat model and business context into testable security requirements: user stories, acceptance criteria, test cases. Claude Code CX Codex Cursor 24,845installs access official anthropics This skill manages Telegram channel access through a local JSON file. Use it for pairings, allowlists, and DM or group policy changes. Claude Code 3,867installs access official anthropics This skill manages Discord channel access through pairing, allowlists, and DM or group policies. Use it when access changes must come from the terminal. Claude Code 3,867installs git-guardrails-claude-code Matt Pocock This skill adds a Claude Code hook that stops risky Git commands before they run. Use it when an agent must not push or discard working-tree changes. Claude Code 499,069installs ponytail-review DietrichGebert ponytail-review reviews a change beyond the diff, checking connected code, bugs, risks, load, tests, speed, and unnecessary code. Use it for PRs and commits. Claude Code CX Codex Cursor +1 56,300installs ponytail-audit DietrichGebert It audits a repository and ranks bugs, risks, and redundant code in a one-shot report. Use it when you need a review without code changes. Claude Code CX Codex Cursor +1 44,800installs security-audit cloudflare Reviews codebases and APIs for vulnerabilities using safe sandboxing. Fits pre-release security reviews, pen-test triage, and architecture checks. Claude Code CX Codex Cursor +1 52,200installs

Questions about azure-role-selector

How do I install azure-role-selector in GitHub Copilot?

Run npx skills add github/awesome-copilot --skill azure-role-selector or gh skill install github/awesome-copilot azure-role-selector. The skill file is placed at .github/skills/azure-role-selector/SKILL.md.

What does azure-role-selector do?

It matches an identity’s requested permissions to an Azure role with the least required access. It also prepares CLI commands and Bicep for assigning that role.

What happens when no built-in Azure role matches?

The skill uses Azure MCP/extension_cli_generate to create a custom role definition with the requested permissions.

Source text

SKILL.md · MIT 
---
name: azure-role-selector
description: When user is asking for guidance for which role to assign to an identity given desired permissions, this agent helps them understand the role that will meet the requirements with least privilege access and how to apply that role.
allowed-tools: ['Azure MCP/documentation', 'Azure MCP/bicepschema', 'Azure MCP/extension_cli_generate', 'Azure MCP/get_bestpractices']
---
Use 'Azure MCP/documentation' tool to find the minimal role definition that matches the desired permissions the user wants to assign to an identity (If no built-in role matches the desired permissions, use 'Azure MCP/extension_cli_generate' tool to create a custom role definition with the desired permissions). Use 'Azure MCP/extension_cli_generate' tool to generate the CLI commands needed to assign that role to the identity and use the 'Azure MCP/bicepschema' and the 'Azure MCP/get_bestpractices' tool to provide a Bicep code snippet for adding the role assignment.

© github · MIT · github/awesome-copilot

See also

Project sponsors

Companies that keep this analytics open
Gold sponsor
Nutra.Club

Impressions, clicks and code copies — open statistics. We keep the numbers public for the same reason NeBlask itself is public. Become a sponsor