rbac-audit Skill
Use when an operator or a scheduled task requests a periodic RBAC / least-privilege audit of the Zava Learning resource group — enumerate the real role assignments effective on the group, correlate each identity against actual Activity-Log usage to find standing access that is never used, flag over-privileged and direc Published by microsoft in sre-agent.
Decision snapshot
Is this a fit?
Security review, Includes SKILL.md, Reusable instructions
Compatibility not yet detected.
Permission behavior not yet detected.
Copy skill directory
2 months ago · MIT license
No specific cautions were detected. Review the source and requested permissions before installing.
What is rbac-audit Skill?
Use when an operator or a scheduled task requests a periodic RBAC / least-privilege audit of the Zava Learning resource group — enumerate the real role assignments effective on the group, correlate each identity against actual Activity-Log usage to find standing access that is never used, flag over-privileged and direc Published by microsoft in sre-agent. This profile combines repository metadata with install, compatibility, and usage signals so developers can quickly decide whether it fits their agent workflow before opening the source repository.
Automated repository signals based on public metadata such as recency, license, installation evidence, and adoption. These are not a security audit or endorsement. See how SkillIndex evaluates profiles.
Key capabilities
- Includes SKILL.md support
- Reusable instructions support
- Security review
- Security review use cases
Declared skill metadata
- Source file: labs/zava-learning/sre-config/agent-config/skills/rbac-audit/SKILL.md
These fields retain source and confidence evidence from the indexed SKILL.md.
Compatibility and setup
- Install or run with Copy skill directory
When to use rbac-audit Skill
- Use it for security review.
Built with
Editorial notes
Source
- Creator: microsoft
- Repository: microsoft/sre-agent
- Skill file: labs/zava-learning/sre-config/agent-config/skills/rbac-audit/SKILL.md
What it does
Use when an operator or a scheduled task requests a periodic RBAC / least-privilege audit of the Zava Learning resource group — enumerate the real role assignments effective on the group, correlate each identity against actual Activity-Log usage to find standing access that is never used, flag over-privileged and direc
Skill instructions
Zava Learning — RBAC / Least-Privilege & Access-Usage Audit Resource Group: @@RG@@. Read-only audit — never create, modify, or remove a role assignment. This is a weekly governance review of who can do what here, and whether they actually use it. The goal is real least-privilege hygiene: surface over-privileged identities, direct (ungoverned) assignments, and standing access that has gone unused so a human can clean it up. Identity naming policy (governance reports name their subjects) The principals under audit (their display name / UPN / objectId and role) are the subject of this report — show them; an RBAC finding that hides the identity is useless. This is NOT the learner-PII the redaction standard protects. Still apply SearchMemory("zava-redaction") redact() to strip any secrets, tokens, credentials, or learner/customer PII that happen to appear, and never print secret values — but DO name the admins, service principals, and groups being audited. Where the names come from (do NOT
Verified compatibility and discovery
Frequently asked questions
What is rbac-audit?
rbac-audit is a open-source AI agent skill with Copy skill directory. Use when an operator or a scheduled task requests a periodic RBAC / least-privilege audit of the Zava Learning resource group — enumerate the real role assignments effective on the group, correlate each.
Who is rbac-audit best for?
rbac-audit is best for reusing agent instructions, scripts, and references, security review workflows.
How do I install rbac-audit?
Install or run rbac-audit using Copy skill directory. Check rbac-audit for the latest setup command.
Is rbac-audit actively maintained?
rbac-audit may need a closer maintenance check before production use.
Project health auto-fetched from the source repository.
Maintain this resource?
Review this source-backed profile, send a correction with evidence, or link to it from your documentation. Claims verify your relationship to the project; profile facts still require source evidence and editorial review.
