---
id: ssh-azure-role-selector
name: "azure-role-selector"
url: https://skills.yangsir.net/skill/ssh-azure-role-selector
author: github
domain: cloud-infra
tags: ["azure-rbac", "role-based-access-control", "identity-management", "azure-ad", "least-privilege"]
install_count: 9100
rating: 4.50 (308 reviews)
github: https://github.com/github/awesome-copilot
---

# azure-role-selector

> 根据所需权限，指导用户为身份分配合适的Azure角色，确保权限最小化和安全性。

**Stats**: 9,100 installs · 4.5/5 (308 reviews)

## Before / After 对比

### Azure角色权限最小化分配

## Readme

# azure-role-selector

Use 'Azure MCP/documentation' tool to find the minimal role definition that matches the desired permissions the user wants to assign to an identity (If no built-in role matches the desired permissions, use 'Azure MCP/extension_cli_generate' tool to create a custom role definition with the desired permissions). Use 'Azure MCP/extension_cli_generate' tool to generate the CLI commands needed to assign that role to the identity and use the 'Azure MCP/bicepschema' and the 'Azure MCP/get_bestpractices' tool to provide a Bicep code snippet for adding the role assignment.
Weekly Installs7.4KRepository[github/awesome-copilot](https://github.com/github/awesome-copilot)GitHub Stars25.7KFirst SeenJan 20, 2026Security Audits[Gen Agent Trust HubPass](/github/awesome-copilot/azure-role-selector/security/agent-trust-hub)[SocketPass](/github/awesome-copilot/azure-role-selector/security/socket)[SnykPass](/github/awesome-copilot/azure-role-selector/security/snyk)Installed oncodex7.3Kclaude-code7.3Kgemini-cli7.1Kopencode7.1Kgithub-copilot7.1Kcursor7.1K

---
*Source: https://skills.yangsir.net/skill/ssh-azure-role-selector*
*Markdown mirror: https://skills.yangsir.net/api/skill/ssh-azure-role-selector/markdown*