azure-rbac
최소한의 Azure RBAC 역할을 찾고, 할당 명령을 생성하며, Bicep 인프라 코드를 제공합니다. Azure 문서를 사용하여 원하는 권한과 일치하는 기본 제공 역할을 식별하거나, 적합한 기본 제공 역할이 없을 때 사용자 지정 역할 정의를 생성합니다. ID, 서비스 주체 및 관리 ID에 역할을 할당하기 위한 Azure CLI 명령과 Bicep 코드 조각을 생성합니다. 역할을 부여하기 위한 필수 조건을 명확히 하며, 여기에는 ( Microsoft.Authorization/roleAssignments/write )와 같은 권한이 포함됩니다...
npx skills add https://github.com/microsoft/azure-skills --skill azure-rbacUse the 'azure__documentation' tool to find the minimal role definition that matches the desired permissions the user wants to assign to an identity. If no built-in role matches the desired permissions, use the 'azure__extension_cli_generate' tool to create a custom role definition with the desired permissions. Then use the 'azure__extension_cli_generate' tool to generate the CLI commands needed to assign that role to the identity. Finally, use the 'azure__bicepschema' and 'azure__get_azure_bestpractices' tools to provide a Bicep code snippet for adding the role assignment. If user is asking about role necessary to set access, refer to Prerequisites for Granting Roles down below:
Prerequisites for Granting Roles
To assign RBAC roles to identities, you need a role that includes the Microsoft.Authorization/roleAssignments/write permission. The most common roles with this permission are:
- User Access Administrator (least privilege - recommended for role assignment only)
- Owner (full access including role assignment)
- Custom Role with
Microsoft.Authorization/roleAssignments/write