From vanguard-frontier-agentic
Selects the narrowest Azure role and assignment scope for granting minimum access, deciding between built-in and custom roles, and choosing safe assignment scopes.
How this skill is triggered — by the user, by Claude, or both
Slash command
/vanguard-frontier-agentic:azure-role-selectorThis skill is limited to the following tools:
The summary Claude sees in its skill listing — used to decide when to auto-load this skill
Select the narrowest Azure role and assignment scope that satisfies the requested access without defaulting to broad standing privilege.
Select the narrowest Azure role and assignment scope that satisfies the requested access without defaulting to broad standing privilege.
Use this skill when the user needs to:
Do not use this skill for tenant-wide governance design, access review programs, or broad RBAC posture critique. Route those asks toward azure-rbac-review or a governance-focused skill.
Load these only when needed:
Return, at minimum:
npx claudepluginhub raishin/vanguard-frontier-agentic --plugin vanguard-frontier-agenticReviews Azure RBAC and Entra ID access decisions against least-privilege principles, including role assignments, custom roles, scopes, and subscriptions.
Helps find the right Azure RBAC role for least privilege, then generates CLI commands and Bicep code for role assignment. Also provides guidance on permissions required to grant roles.
Provides expert guidance for Azure RBAC development: troubleshooting role issues, ABAC conditions, PIM, deny assignments, and automation with ARM/Bicep/CLI/PowerShell.