role▌

Create and install custom Codex agent roles with guided configuration and validation. \n \n Collects required inputs (model, reasoning effort, developer instructions, role name, install scope) before writing any files, with strict validation against the config schema \n Writes minimal role config files by default, adding optional parameters like sandboxing, web search controls, and MCP servers only when explicitly requested \n Installs roles into global ( ~/.codex/config.toml ) or project-scoped

Guidance for selecting least-privilege Azure roles matching specific permission requirements. \n \n Searches Azure built-in roles to find the minimal role matching desired permissions, or generates custom role definitions when no built-in role fits \n Provides CLI commands and Bicep code snippets for applying role assignments to identities \n Integrates Azure documentation, best practices, and Bicep schema tools to recommend and implement role configurations \n