azure-rbac 是做什么的？
帮助用户为身份找到具有最低权限的Azure RBAC角色，然后生成用于分配角色的CLI命令和Bicep代码。同时提供授予角色所需权限的指导。适用场景：用于角色分配的bicep、我应该分配什么角色、最低权限角色、RBAC角色、读取Blob的角色、托管标识的角色、自定义角色定义、向标识分配角色、我需要什么角色来授予访问权限、分配角色所需的权限。
帮助用户为身份找到具有最低权限的Azure RBAC角色，然后生成用于分配角色的CLI命令和Bicep代码。同时提供授予角色所需权限的指导。
该技能专为需要管理Azure RBAC（基于角色的访问控制）的开发者和DevOps工程师设计。其主要目标是通过分析所需权限（如读取Blob、管理资源等），自动匹配最合适的Azure内置或自定义角色，确保遵循最低权限原则。用户只需描述访问需求，技能便会生成对应的Azure CLI命令和Bicep基础设施即代码，直接用于角色分配。此外，它还提供关于授予角色分配本身所需权限的指导，帮助理解委托管理场景。此技能适用于Claude Code、Coder等AI编程助手，基于内置的角色数据和分析逻辑工作，无需外部依赖。通过减少手动查找角色ID和拼写命令的错误，显著提高安全配置效率和准确性。
npx skills add https://github.com/microsoft/azure-skills/tree/main/skills/azure-rbacInstalled? Explore more 编程与开发 skills: steipete/bluebubbles, steipete/eightctl, steipete/blucli · View all 6 →
帮助用户为身份找到具有最低权限的Azure RBAC角色，然后生成用于分配角色的CLI命令和Bicep代码。同时提供授予角色所需权限的指导。适用场景：用于角色分配的bicep、我应该分配什么角色、最低权限角色、RBAC角色、读取Blob的角色、托管标识的角色、自定义角色定义、向标识分配角色、我需要什么角色来授予访问权限、分配角色所需的权限。
This repo contains 20 individual skills — each has its own dedicated page.
Agent skill 'airunway-aks-setup' from microsoft/azure-skills. Use when the task matches this skill's domain.
Agent skill 'appinsights-instrumentation' from microsoft/azure-skills. Use when the task matches this skill's domain.
Agent skill 'azure-ai' from microsoft/azure-skills. Use when the task matches this skill's domain.
Agent skill 'azure-aigateway' from microsoft/azure-skills. Use when the task matches this skill's domain.
Agent skill 'azure-app-onboard' from microsoft/azure-skills. Use when the task matches this skill's domain.
Assess whether source code is ready to deploy to Azure — the check BEFORE infrastructure work. Evaluates build health, app completeness, dependencies and local services, stack compatibility, and deployment feasibility. Answers questions about what your app needs before it can be deployed — frameworks, dependencies, and configuration. Checks whether dependencies are compatible and identifies deployment blockers and unsupported frameworks. WHEN: \"evaluate my repo\", \"is my app ready to deploy\", \"what does my app need to deploy\", \"what do I need before deploying\", \"does my app need\", \"can I ship this to Azure\", \"scan my repo for issues\", \"is this app deployable\", \"check if my app is ready for Azure\", \"do I need a Dockerfile\", \"what's blocking my deployment\", \"are there any blockers\", \"are my dependencies compatible\", \"does Azure support my framework\", \"what needs to change before deploying\", \"check my app configuration\".
Agent skill 'azure-cloud-migrate' from microsoft/azure-skills. Use when the task matches this skill's domain.
Agent skill 'azure-compliance' from microsoft/azure-skills. Use when the task matches this skill's domain.
Agent skill 'azure-compute' from microsoft/azure-skills. Use when the task matches this skill's domain.
Agent skill 'azure-cost' from microsoft/azure-skills. Use when the task matches this skill's domain.
Identify Azure cost savings from usage and spending data. USE FOR: optimize Azure costs, reduce Azure spending/expenses, analyze Azure costs, find cost savings, generate cost optimization report, identify orphaned resources to delete, rightsize VMs, reduce waste, optimize Redis costs, optimize storage costs, AKS cost analysis add-on, namespace cost, cost spike, anomaly, budget alert, AKS cost visibility. DO NOT USE FOR: deploying resources (use azure-deploy), general Azure diagnostics (use azure-diagnostics), security issues (use azure-security)
Agent skill 'azure-deploy' from microsoft/azure-skills. Use when the task matches this skill's domain.
Agent skill 'azure-diagnostics' from microsoft/azure-skills. Use when the task matches this skill's domain.
Agent skill 'azure-enterprise-infra-planner' from microsoft/azure-skills. Use when the task matches this skill's domain.
Build, deploy, and modify GitHub Copilot SDK apps on Azure. MANDATORY when codebase contains @github/copilot-sdk or CopilotClient in package.json. PREFER OVER azure-prepare when copilot-sdk markers detected. WHEN: copilot SDK, @github/copilot-sdk, copilot-powered app, build copilot app, prepare copilot app, add feature to copilot app, modify copilot app, BYOM, bring your own model, CopilotClient, createSession, sendAndWait, azd init copilot. DO NOT USE FOR: deploying already-prepared copilot-sdk apps (use azure-deploy), general web apps without copilot SDK (use azure-prepare), Copilot Extensions, Foundry agents (use microsoft-foundry).
Agent skill 'azure-kubernetes' from microsoft/azure-skills. Use when the task matches this skill's domain.
Agent skill 'azure-kusto' from microsoft/azure-skills. Use when the task matches this skill's domain.
Agent skill 'azure-messaging' from microsoft/azure-skills. Use when the task matches this skill's domain.
Azure Observability Services including Azure Monitor, Application Insights, Log Analytics, Alerts, and Workbooks. Provides metrics, APM, distributed tracing, KQL queries, and interactive reports. USE FOR: Azure Monitor, Application Insights, Log Analytics, Alerts, Workbooks, metrics, APM, distributed tracing, KQL queries, interactive reports, observability, monitoring dashboards. DO NOT USE FOR: instrumenting apps with App Insights SDK (use appinsights-instrumentation), querying Kusto/ADX clusters (use azure-kusto), cost analysis (use azure-cost-optimization).
azure-postgres — an installable skill for AI agents.
Send and manage iMessages via BlueBubbles, including attachments, tapbacks, edits, replies, and groups.
Control Eight Sleep pods (status, temperature, alarms, schedules).
BluOS CLI (blu) for discovery, playback, grouping, and volume.
Create, search, and manage Bear notes via grizzly CLI.
Capture frames or clips from RTSP/ONVIF cameras.
Search GIF providers with CLI/TUI, download results, and extract stills/sheets.