Azure Role Selector

When you're setting up Azure permissions and don't want to accidentally give someone the keys to the kingdom, this skill walks you through finding the minimal role that matches your requirements. It searches Azure's built-in roles first, generates custom role definitions if nothing fits, then spits out both CLI commands and Bicep snippets to actually apply the assignment. Honestly, it's the kind of thing that saves you from either over-permissioning users or spending an hour digging through Microsoft's role documentation trying to figure out if "Storage Blob Data Reader" includes what you actually need.