Guidance for selecting least-privilege Azure roles matching specific permission requirements.

• ›Searches Azure built-in roles to find the minimal role matching desired permissions, or generates custom role definitions when no built-in role fits
• ›Provides CLI commands and Bicep code snippets for applying role assignments to identities
• ›Integrates Azure documentation, best practices, and Bicep schema tools to recommend and implement role configurations