Microsoft built this to solve the common headache of figuring out which Azure RBAC role gives just enough permissions without going overboard. It searches Azure docs to find the minimal built-in role that matches what you need, or generates a custom role definition if nothing fits. Then it spits out the CLI commands and Bicep code to actually assign the role. The real time-saver is that it also tells you what permissions you need just to grant roles in the first place, since that trips up a lot of people. Solid for anyone doing infrastructure as code or managing Azure permissions programmatically.
claude skill add microsoft/azure-skills:azure-rbac