Select Least-Privilege Azure Roles
Azure role decisions can grant too much access when requirements are unclear. This skill maps desired permissions to minimal roles and assignment guidance.
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Review the Skillstore skill "azure-role-selector" from https://skillstore.io/skills/7spade-azure-role-selector.md and its manifest at https://skillstore.io/api/skills/7spade-azure-role-selector/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Your Agent should still show its plan and request any confirmation required by the security policy.
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Using "azure-role-selector". A managed identity needs read-only access to blobs in one storage account.
Expected outcome:
The response names the closest least-privilege built-in role, explains the match, and describes the narrow assignment scope.
Using "azure-role-selector". A deployment pipeline needs permission to assign one role at a resource group scope.
Expected outcome:
The response compares relevant role options, highlights excess permissions, and recommends the smallest practical assignment.
Using "azure-role-selector". No built-in role matches a short list of required actions.
Expected outcome:
The response outlines a custom role approach, provides assignment guidance, and notes required administrator review.
Static analysis reported no suspicious patterns in the single prompt-only SKILL.md file. Manual review found no prompt injection or malicious intent. The skill uses Azure MCP tools to identify least-privilege RBAC roles and produce assignment guidance.
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
https://skillstore.io/skills/7spade-azure-role-selector/audits/7?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report[](https://skillstore.io/skills/7spade-azure-role-selector?utm_source=security_passport_badge)<a href="https://skillstore.io/skills/7spade-azure-role-selector?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/7spade-azure-role-selector/security.svg" alt="Skillstore security assessment" loading="lazy"></a><iframe src="https://skillstore.io/embed/skills/7spade-azure-role-selector.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>7Spade. (2026). azure-role-selector security audit report (audit version 7) [Author version unspecified]. Skillstore. https://skillstore.io/skills/7spade-azure-role-selector/audits/7@techreport{7spade-7spade-azure-role-selector-2026,
author = {7Spade},
title = {azure-role-selector security audit report (audit version 7)},
institution = {Skillstore},
year = {2026},
number = {7},
url = {https://skillstore.io/skills/7spade-azure-role-selector/audits/7},
note = {Author version unspecified}
}cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "azure-role-selector security audit report (audit version 7)"
version: "unspecified"
type: report
authors:
- name: "7Spade"
date-released: "2026-07-06"
url: "https://skillstore.io/skills/7spade-azure-role-selector/audits/7"
identifiers:
- type: other
value: "skillstore:7spade-azure-role-selector:audit:7"
description: "Skillstore immutable audit report identifier"
Select the least-privilege Azure role for an application identity that needs specific resource permissions.
Compare requested permissions with built-in roles before approving an Azure RBAC change.
Generate role assignment guidance and Bicep snippets for repeatable deployment workflows.
I need to let [identity] perform [actions] on [scope]. Use azure-role-selector to recommend the least-privilege Azure role.
Compare built-in Azure roles for [actions] on [resource type]. Explain the least-privilege choice and note permissions that exceed the need.
For [identity type and name], [scope], and required permissions [list], recommend the minimal role and generate Azure CLI assignment guidance.
No built-in role appears to match [permissions]. Draft a custom role definition, assignment guidance, and Bicep snippet for [scope].
Author
7SpadeLicense
MIT
Skillstore revision
r1
Version notice
The author did not declare a version.
Ref
c1fdca50ff516318f65fed0d7f9e82797c5171dc
Maintenance freshness
7/18/2026
Usage
8 downloads · 186 views
File structure
📄 SKILL.md
Create Reliable AI Skills
AI teams often need reusable workflows but lack a clear skill structure. This skill guides Claude, Codex, and Claude Code through planning, authoring, validating, and packaging skills.
Build Angular Utilities with @delon/util
Angular teams often repeat data formatting, cloning, grouping, and browser helper logic. This skill shows how to use @delon/util helpers in ng-alain and task workflow components.
Test Web Apps with Playwright
Frontend changes need validation in a real browser, not only static checks. This skill guides Claude, Codex, and Claude Code through Playwright-based testing, debugging, screenshots, and console inspection.
Build @delon Chart Dashboards
Angular teams need consistent charts that match ng-alain dashboard patterns. This skill provides @delon/chart examples and guidance for common enterprise visualizations.
Draft Reader-Tested Documentation
Important documents often fail because key context stays in the author's head. This skill guides Claude, Codex, or Claude Code through context gathering, structured drafting, iterative refinement, and reader testing.
Design Distinctive Frontend Interfaces
Generic UI output makes products feel unfinished and hard to trust. This skill guides Claude, Codex, and Claude Code toward polished frontend work with stronger visual direction.
Choose Least-Privilege Azure RBAC Roles
by microsoft
Selecting an Azure role with excessive permissions increases security risk. This skill recommends minimal roles and prepares Azure CLI and Bicep assignments.
Audit Azure Compliance and Key Vault Expiration
by microsoft
Azure teams need a consistent way to identify compliance gaps and expiring Key Vault assets. This skill runs scoped assessments and produces prioritized remediation guidance.
Instrument Apps with Azure Application Insights
by microsoft
Application teams need consistent telemetry setup across languages and Azure hosting services. This skill provides targeted SDK, infrastructure, environment, and query guidance for Application Insights.
Visualize Azure Resource Group Architectures
by microsoft
Azure resource relationships can be difficult to review across complex groups. This skill inventories resources and creates structured Mermaid architecture documentation.
Analyze Azure Data Explorer with KQL
by microsoft
Azure Data Explorer data can be hard to inspect without the right KQL structure and schema context. This skill helps Claude, Codex, and Claude Code build focused KQL queries, explore schemas, and troubleshoot ADX results.
Build Reliable Azure Queue Workflows
by sickn33
Azure Queue Storage integrations require careful authentication, visibility, and message lifecycle handling. This skill provides focused Python patterns for common synchronous and asynchronous operations.