azure-role-selector

Guidance for selecting least-privilege Azure roles matching specific permission requirements. Use 'Azure MCP/documentation' tool to find the minimal role definition that matches the desired permissions the user wants to assign to an identity (If no built-in role matches the desired permissions, use 'Azure MCP/extension_cli_generate' tool to create a custom role definition with the desired permissions). Use 'Azure MCP/extension_cli_generate' tool to generate the CLI commands needed to assign that role to the identity and use the 'Azure MCP/bicepschema' and the 'Azure MCP/get_bestpractices' tool to provide a Bicep code snippet for adding the role assignment. - Searches Azure built-in roles to find the minimal role matching desired permissions, or generates custom role definitions when no built-in role fits - Provides CLI commands and Bicep code snippets for applying role assignments to identities - Integrates Azure documentation, best practices, and Bicep schema tools to recommend and implement role configurations