メニュー
Use when designing Azure identity architectures — RBAC role assignments, managed identities, Entra ID app registrations, conditional access policies, or workload identity federation for CI/CD. Covers zero trust patterns, PIM, and GitHub OIDC.
Codex または Claude でインストール この Prompt をコピーして Codex、Claude、または他のアシスタントに貼り付けると、Skill ページを確認してインストールできます。
SOC 職業分類に基づく
Use when designing Copilot agents, authoring agent definitions, creating skill folders, or scaffolding instruction files. Provides templates and conventions for the agent ecosystem.
Use when designing, reviewing, or evolving API contracts. Provides OpenAPI templates, breaking-change checklists, versioning decision trees, and governance checklists.
API authentication, authorization, input validation, rate limiting, and protection patterns
Scan legacy applications to discover project structure, NuGet/npm dependencies, database connection strings, external service bindings, framework versions, and migration complexity scores. Produces structured JSON, YAML, or Markdown inventory reports.
Use when designing systems, recording architecture decisions, evaluating technologies, or assessing architectural risks. Provides C4 diagram templates, ADR format, technology selection matrices, and risk registers.
Deploy, scale, and manage containerized applications on Azure Container Apps with Dapr, revision management, and advanced networking
| name | azure-identity |
| description | Use when designing Azure identity architectures — RBAC role assignments, managed identities, Entra ID app registrations, conditional access policies, or workload identity federation for CI/CD. Covers zero trust patterns, PIM, and GitHub OIDC. |
| compatibility | ["VS Code","Cursor","Windsurf","Claude Code"] |
| metadata | {"category":"Uncategorized","tags":["uncategorized"],"maturity":"beta","audience":["developers"]} |
| allowed-tools | ["bash","git","grep","find"] |
Use this skill when the task involves designing or implementing identity and access management on Azure — including RBAC hierarchies, managed identity configurations, Entra ID app registrations, conditional access policies, and workload identity federation.
Reference this skill by attaching skills/azure-identity/SKILL.md to your agent context, or instruct the agent:
Use the azure-identity skill. Apply the RBAC role assignment template and managed identity mapping template to the workload being designed.
| Template | Purpose |
|---|---|
rbac-role-assignment-template.md | RBAC role assignment matrix for documenting principal-to-role-to-scope mappings |
managed-identity-mapping-template.md | Managed identity mapping for cataloguing system-assigned and user-assigned identities per workload |
app-registration-checklist.md | Entra ID app registration checklist covering API permissions, credentials, and token configuration |
workload-identity-federation-template.md | Workload identity federation configuration for GitHub Actions OIDC and other external identity providers |
conditional-access-policy-template.md | Conditional access policy template for zero trust enforcement across users, devices, and applications |
This skill is designed to be used alongside the identity-architect agent. The agent drives the identity design workflow; this skill provides the reference templates and standards.
For infrastructure provisioning of identity resources, coordinate with the devops-engineer agent using Bicep or Terraform. For application-level auth integration, coordinate with the backend-dev or frontend-dev agents. For security threat modeling of identity boundaries, pair with the security-analyst agent.
