From Napkin
Recommends least-privilege Azure RBAC roles for identities based on permissions, generates CLI assignment commands and Bicep snippets.
How this skill is triggered — by the user, by Claude, or both
Slash command
/napkin:azure-role-selectorThis skill is limited to the following tools:
The summary Claude sees in its skill listing — used to decide when to auto-load this skill
Use 'Azure MCP/documentation' tool to find the minimal role definition that matches the desired permissions the user wants to assign to an identity (If no built-in role matches the desired permissions, use 'Azure MCP/extension_cli_generate' tool to create a custom role definition with the desired permissions). Use 'Azure MCP/extension_cli_generate' tool to generate the CLI commands needed to as...
Use 'Azure MCP/documentation' tool to find the minimal role definition that matches the desired permissions the user wants to assign to an identity (If no built-in role matches the desired permissions, use 'Azure MCP/extension_cli_generate' tool to create a custom role definition with the desired permissions). Use 'Azure MCP/extension_cli_generate' tool to generate the CLI commands needed to assign that role to the identity and use the 'Azure MCP/bicepschema' and the 'Azure MCP/get_bestpractices' tool to provide a Bicep code snippet for adding the role assignment.
npx claudepluginhub ani1797/forge --plugin copilot-sdk3plugins reuse this skill
First indexed Jun 6, 2026
Recommends least-privilege Azure RBAC roles for identities based on permissions, generates CLI assignment commands and Bicep snippets.
Identifies least-privilege Azure RBAC roles for identities, generates az CLI commands and Bicep code for assignments, and explains permissions required to grant roles.
Selects the narrowest Azure role and assignment scope for granting minimum access, deciding between built-in and custom roles, and choosing safe assignment scopes.