azure-rbac

Find minimal Azure RBAC roles, generate assignment commands, and provide Bicep infrastructure code.

• Identifies built-in roles matching desired permissions using Azure documentation, or creates custom role definitions when no built-in role fits
• Generates Azure CLI commands and Bicep code snippets for assigning roles to identities, service principals, and managed identities
• Clarifies prerequisites for granting roles, including which permissions (Microsoft.Authorization/roleAssignments/write) are required and recommends least-privilege options like User Access Administrator
• Supports least-privilege access patterns by matching specific permission requirements rather than defaulting to broad roles