Azure RBAC の最小特権ロールを特定し、CLI コマンドと Bicep コードを生成して割り当てるスキルです。ロール付与に必要なアクセス許可に関するガイダンスも提供します。
このスキルは、Azure のロールベースのアクセス制御 (RBAC) を管理する際に、ユーザーやマネージド ID に最小特権のロールを割り当てるのを支援します。特定のアクション (例: ブロブの読み取り) に最適な組み込みロールの検索、カスタムロール定義の作成、Bicep テンプレートや Azure CLI コマンドの生成をサポートします。また、ロールを割り当てるためにユーザー自身が必要なアクセス許可 (例: Microsoft.Authorization/roleAssignments/write) も提示します。主に Claude Code や Cursor などの AI エージェントプラットフォームで動作し、開発者が Azure リソースへの安全で効率的なアクセス管理を実現できるようにします。
npx skills add https://github.com/microsoft/azure-skills/tree/main/skills/azure-rbacInstalled? Explore more コーディング＆開発 skills: steipete/bluebubbles, steipete/eightctl, steipete/blucli · View all 6 →
ユーザーが ID に対して最小特権アクセスを備えた適切な Azure RBAC ロールを見つけ、それを割り当てるための CLI コマンドと Bicep コードを生成するのに役立ちます。また、ロールを付与するために必要なアクセス許可に関するガイダンスも提供します。使用タイミング: Bicep でのロール割り当て、どのロールを割り当てるべきか、最小特権ロール、RBAC ロールの検索、ブロブを読み取るロール、マネージド ID 用のロール、カスタムロール定義、ID へのロール割り当て、アクセス権を付与するために必要なロール、ロールを割り当てるためのアクセス許可。
This repo contains 20 individual skills — each has its own dedicated page.
Agent skill 'airunway-aks-setup' from microsoft/azure-skills. Use when the task matches this skill's domain.
Agent skill 'appinsights-instrumentation' from microsoft/azure-skills. Use when the task matches this skill's domain.
Agent skill 'azure-ai' from microsoft/azure-skills. Use when the task matches this skill's domain.
Agent skill 'azure-aigateway' from microsoft/azure-skills. Use when the task matches this skill's domain.
Agent skill 'azure-app-onboard' from microsoft/azure-skills. Use when the task matches this skill's domain.
Assess whether source code is ready to deploy to Azure — the check BEFORE infrastructure work. Evaluates build health, app completeness, dependencies and local services, stack compatibility, and deployment feasibility. Answers questions about what your app needs before it can be deployed — frameworks, dependencies, and configuration. Checks whether dependencies are compatible and identifies deployment blockers and unsupported frameworks. WHEN: \"evaluate my repo\", \"is my app ready to deploy\", \"what does my app need to deploy\", \"what do I need before deploying\", \"does my app need\", \"can I ship this to Azure\", \"scan my repo for issues\", \"is this app deployable\", \"check if my app is ready for Azure\", \"do I need a Dockerfile\", \"what's blocking my deployment\", \"are there any blockers\", \"are my dependencies compatible\", \"does Azure support my framework\", \"what needs to change before deploying\", \"check my app configuration\".
Agent skill 'azure-cloud-migrate' from microsoft/azure-skills. Use when the task matches this skill's domain.
Agent skill 'azure-compliance' from microsoft/azure-skills. Use when the task matches this skill's domain.
Agent skill 'azure-compute' from microsoft/azure-skills. Use when the task matches this skill's domain.
Agent skill 'azure-cost' from microsoft/azure-skills. Use when the task matches this skill's domain.
Identify Azure cost savings from usage and spending data. USE FOR: optimize Azure costs, reduce Azure spending/expenses, analyze Azure costs, find cost savings, generate cost optimization report, identify orphaned resources to delete, rightsize VMs, reduce waste, optimize Redis costs, optimize storage costs, AKS cost analysis add-on, namespace cost, cost spike, anomaly, budget alert, AKS cost visibility. DO NOT USE FOR: deploying resources (use azure-deploy), general Azure diagnostics (use azure-diagnostics), security issues (use azure-security)
Agent skill 'azure-deploy' from microsoft/azure-skills. Use when the task matches this skill's domain.
Agent skill 'azure-diagnostics' from microsoft/azure-skills. Use when the task matches this skill's domain.
Agent skill 'azure-enterprise-infra-planner' from microsoft/azure-skills. Use when the task matches this skill's domain.
Build, deploy, and modify GitHub Copilot SDK apps on Azure. MANDATORY when codebase contains @github/copilot-sdk or CopilotClient in package.json. PREFER OVER azure-prepare when copilot-sdk markers detected. WHEN: copilot SDK, @github/copilot-sdk, copilot-powered app, build copilot app, prepare copilot app, add feature to copilot app, modify copilot app, BYOM, bring your own model, CopilotClient, createSession, sendAndWait, azd init copilot. DO NOT USE FOR: deploying already-prepared copilot-sdk apps (use azure-deploy), general web apps without copilot SDK (use azure-prepare), Copilot Extensions, Foundry agents (use microsoft-foundry).
Agent skill 'azure-kubernetes' from microsoft/azure-skills. Use when the task matches this skill's domain.
Agent skill 'azure-kusto' from microsoft/azure-skills. Use when the task matches this skill's domain.
Agent skill 'azure-messaging' from microsoft/azure-skills. Use when the task matches this skill's domain.
Azure Observability Services including Azure Monitor, Application Insights, Log Analytics, Alerts, and Workbooks. Provides metrics, APM, distributed tracing, KQL queries, and interactive reports. USE FOR: Azure Monitor, Application Insights, Log Analytics, Alerts, Workbooks, metrics, APM, distributed tracing, KQL queries, interactive reports, observability, monitoring dashboards. DO NOT USE FOR: instrumenting apps with App Insights SDK (use appinsights-instrumentation), querying Kusto/ADX clusters (use azure-kusto), cost analysis (use azure-cost-optimization).
azure-postgres — an installable skill for AI agents.
Send and manage iMessages via BlueBubbles, including attachments, tapbacks, edits, replies, and groups.
Control Eight Sleep pods (status, temperature, alarms, schedules).
BluOS CLI (blu) for discovery, playback, grouping, and volume.
Create, search, and manage Bear notes via grizzly CLI.
Capture frames or clips from RTSP/ONVIF cameras.
Search GIF providers with CLI/TUI, download results, and extract stills/sheets.