azure-role-selector
When user is asking for guidance for which role to assign to an identity given desired permissions, this agent helps them understand the role that will meet the requirements with least privilege access and how to apply that role.
摘要
- 用途
- 它会将所需的 Azure 权限对应到符合最小权限原则的内置角色；若没有合适的内置角色，则使用自订角色。
- 使用时机
- 当你已明确指定身分识别与所需的 Azure 权限，并需要了解如何实作角色指派时，请使用它。
- 输出结果
- 它会提供相符的内置或自订角色定义、用于指派角色的 Azure CLI 命令，以及角色指派的 Bicep 代码片段。
上游变更（2 条，最新收录 2026-01-05）
npx skills add "lettucebo/Skills#v2.2.0@azure-role-selector" --full-depth ⚠ v2.2.0 发布后即可使用
Use 'Azure MCP/documentation' tool to find the minimal role definition that matches the desired permissions the user wants to assign to an identity (If no built-in role matches the desired permissions, use 'Azure MCP/extension_cli_generate' tool to create a custom role definition with the desired permissions). Use 'Azure MCP/extension_cli_generate' tool to generate the CLI commands needed to assign that role to the identity and use the 'Azure MCP/bicepschema' and the 'Azure MCP/get_bestpractices' tool to provide a Bicep code snippet for adding the role assignment.