azure-rbac
Find least-privilege Azure RBAC roles and generate CLI/Bicep to assign them.
🛡️ AgentReady threat assessment
MAESTRO 7-layer threat model + OWASP AIVSS risk score for azure-rbac, derived from its capabilities.
These scores are auto-generated from public information (the agent's own listing, docs, and repository) using the canonical OWASP AIVSS formula and the MAESTRO framework — an estimate for guidance, not a penetration test, audit, or certification. See the scoring methodology — every score is re-derived by the same automated method as an agent's public evidence changes.
Overview
A Microsoft azure-skills plugin skill that helps pick the correct least-privilege Azure RBAC role for an identity, then generates the CLI commands and Bicep code to assign it, plus guidance on permissions needed to grant roles. Security-relevant: it produces identity/permission-granting infrastructure code.
Key features and capabilities
- Least-privilege role selection
- CLI + Bicep assignment generation
- Grant-permission guidance
Use cases
- Choosing an RBAC role for a managed identity
- Generating a Bicep role assignment