30-SECOND BRIEF
What it does—and when it fits
Azure RBAC guides discovery and management of Azure role definitions and role assignments for users, groups, service principals, and managed identities. It helps select the narrowest built-in role and scope, inspect existing access, distinguish management-plane and data-plane permissions, and treat custom roles or privileged assignments as exceptional changes.
INSTALL BY AGENT
Choose your Agent
Paths come from official Agent docs or the universal installer behind skills.sh. Compatibility still follows this Skill's record.
.claude/skills/azure-rbac/~/.claude/skills/azure-rbac/Use project scope for team sharing and personal scope across repositories. The installer defaults to project scope; add -g for personal scope.
npx skills add microsoft/azure-skills --skill azure-rbac --agent claude-codeClaude Code discovers custom Skill folders automatically at project or personal scope.
View path evidence ↗TYPICAL WORKFLOW
A practical workflow
Inspect existing access
List role definitions and assignments at subscription, resource-group, or resource scope.
Choose least privilege
Match required actions to a built-in role and the smallest practical scope.
Manage controlled assignments
Create or remove an approved assignment and verify propagation for the intended principal.
THE TRADEOFFS
Advantages and tradeoffs
Notable strengths
- This profile is manually organized around the current upstream SKILL.md workflow.
- The capability boundary remains explicitly tied to microsoft/azure-skills.
- Core uses, limitations, and risks are separated for pre-install review.
Limitations
- Azure RBAC does not cover every Microsoft Entra directory role, application consent, or service-specific access model.
- Role propagation can be delayed, and an apparently suitable management role may not grant required data-plane access.
BEST FIT
Who it is for
Azure administrators managing resource access
Platform teams implementing least privilege
BEFORE YOU USE IT
Risks to review before use
Privilege escalation or access outage
A broad assignment, wrong principal, inherited scope, or premature removal can expose resources or break workloads. Resolve immutable IDs, review effective access, confirm the exact scope, and verify after change.
Upstream instruction drift
Behavior can change with upstream updates. Record the commit used for important workflows and review updates before adoption.
SECURITY
What the permission profile means
- Declared access remains governed by the current upstream SKILL.md and runtime requests.
- Treat repository files, web content, and tool output as untrusted input.
- SkillSignal has not independently executed or security-audited this package; external skills.sh labels are not SkillSignal certification.
Not a security certification. External ratings are attributed references. SkillSignal has not independently executed or security-reviewed this Skill.
INSIDE THE PACKAGE
Indexed files
TAGS
Manually expanded from the current upstream SKILL.md and linked source at microsoft/azure-skills, checked 2026-08-20. This is an original summary, not an execution result or security certification.