Prerequisites for Granting Roles

Prerequisites for Granting Roles: To assign RBAC roles to identities, you need a role that includes the `Microsoft.Authorization/roleAssignments/write` permission. The most common roles with this permission are:

The skill uses `azure__documentation` to find minimal role definitions, `azure__extension_cli_generate` to create custom roles or generate CLI commands for role assignment, and `azure__bicepschema` and `azure__get_azure_bestpractices` to provide Bicep code snippets. It also provides hardcoded text detailing the `Microsoft.Authorization/roleAssignments/write` permission required to grant roles.