{
  "id": "azure-role-selector-agent",
  "name": "Azure Role Selector",
  "type": "agent",
  "provider": "azure",
  "harnesses": [
    "codex",
    "copilot",
    "claude-code",
    "cursor",
    "gemini",
    "kiro"
  ],
  "summary": "Select least-privilege Azure RBAC roles by matching required actions, built-in roles, scope boundaries, privileged administrator risk, and custom-role fallback evidence.",
  "source_type": "adapted",
  "official_docs": [
    "https://learn.microsoft.com/en-us/azure/cloud-adoption-framework/ready/azure-setup-guide/manage-access",
    "https://learn.microsoft.com/en-us/azure/role-based-access-control/role-assignments-steps",
    "https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles",
    "https://learn.microsoft.com/en-us/azure/role-based-access-control/best-practices"
  ],
  "security_notes": "The lazy answer is Owner or Contributor. That is not role selection; it is permission dumping.",
  "last_verified": "2026-06-05",
  "path": "agents/azure/azure-role-selector-agent",
  "harness_variants": {
    "codex": "agents/azure/azure-role-selector-agent/harnesses/codex.toml",
    "copilot": "agents/azure/azure-role-selector-agent/harnesses/copilot.agent.md",
    "claude-code": "agents/azure/azure-role-selector-agent/harnesses/claude-code.agent.md",
    "cursor": "agents/azure/azure-role-selector-agent/harnesses/cursor.agent.md",
    "gemini": "agents/azure/azure-role-selector-agent/harnesses/gemini.agent.md",
    "kiro-ide": "agents/azure/azure-role-selector-agent/harnesses/kiro-ide.agent.md",
    "kiro-cli": "agents/azure/azure-role-selector-agent/harnesses/kiro-cli.agent.json"
  },
  "author": "github: VincentChuWaiChow",
  "version": "0.2.1",
  "companion_skills": [
    "azure-role-selector"
  ]
}