azure-role-selector
Guides your agent on which permission to assign to a user in Azure. It suggests the least privilege role needed for the task.
What it does
This agent helps you choose the right permission to give someone in a system called Azure. It ensures the person receives only the necessary permissions, without excess.
When to use it
- ✓When you need to grant access to someone in Azure.
- ✓When you want to make sure the person can only do what they need to.
- ✓When you need help setting up the correct permissions.
Example of what to ask your AI
“I want to give a new employee access to manage virtual machines, but without them being able to delete everything. What permission should I use?”
Want more? Open the sections below.
How to use
The easiest way: copy the message below and paste it into Claude, ChatGPT, Cursor or any AI. It reads the skill and follows the instructions.
Skill link
Ready-to-paste message
How it works
It searches for available permissions in Azure to find the most suitable one. If it doesn't find a ready-made one, it creates a custom one. Then, it shows how to apply that permission and provides code to simplify the setup.
Installation
Easiest way: copy the skill link and paste it into Claude, ChatGPT or Cursor asking it to follow the instructions.
In the terminal (Claude Code, Codex, Cursor), in your project folder:
npx skills add github/awesome-copilot --skill azure-role-selectorOr download just the file:
curl -L https://raw.githubusercontent.com/github/awesome-copilot/main/skills/azure-role-selector/SKILL.md -o SKILL.mdTechnical content (original SKILL.md)
Original text by the author, straight from GitHub.
Use 'Azure MCP/documentation' tool to find the minimal role definition that matches the desired permissions the user wants to assign to an identity (If no built-in role matches the desired permissions, use 'Azure MCP/extension_cli_generate' tool to create a custom role definition with the desired permissions). Use 'Azure MCP/extension_cli_generate' tool to generate the CLI commands needed to assign that role to the identity and use the 'Azure MCP/bicepschema' and the 'Azure MCP/get_bestpractices' tool to provide a Bicep code snippet for adding the role assignment.
FAQ
What is 'least privilege'?
It means giving only the strictly necessary permissions for the person to do their job, avoiding security risks.
What is Azure?
It's Microsoft's cloud computing service that allows you to create and manage applications and services.
What are CLI commands and Bicep?
These are ways to give instructions to Azure via text, like a 'code' to set up permissions.
Details
Original description by the author
When user is asking for guidance for which role to assign to an identity given desired permissions, this agent helps them understand the role that will meet the requirements with least privilege access and how to apply that role.
repo: github/awesome-copilot
Popularity
- GitHub stars
- 40k
- Ranking position
- #5029
- License
- MIT
- Updated
- 10/15/2026
Comments
- …
More skills from this repository
acquire-codebase-knowledge
Helps your agent understand and document an existing code project. It's useful for onboarding new people or getting an overview of the architecture.
github/awesome-copilot
acreadiness-assess
Enables your agent to assess a project's readiness for AI and generate a report. It's useful for understanding how well a project is prepared to use AI tools.
github/awesome-copilot
acreadiness-generate-instructions
Helps your agent create instructions for AI tools based on an assessment. It's useful for improving how AI interacts with code and closing identified gaps.
github/awesome-copilot
acreadiness-policy
Enables your agent to help define or apply policies for AI project assessment. It's useful for standardizing how projects are evaluated and ensuring compliance.
github/awesome-copilot
Similar skills
django-security
Helps your agent implement security practices in Django applications. It focuses on authentication, authorization, and prevention against common attacks, ensuring more secure code.
affaan-m/ECC
laravel-security
Helps your agent secure Laravel applications against threats. Implements security practices for authentication, authorization, and common attack prevention.
affaan-m/ECC
module-regression
Helps your agent manage changes in large projects. Ensures code changes in one part don't break other parts.
affaan-m/ECC