create_role_assignment
Assign an Azure RBAC role to a user, group, or service principal, optionally scoped to a resource group or specific resource.
Instructions
Create a new role assignment (RBAC).
Args: principal_id: Object ID of the principal (user, group, or service principal) role_definition_name: Role name (e.g., 'Contributor', 'Reader', 'AcrPull') resource_group: Resource group scope (optional, uses subscription if not provided) scope: Full resource scope (optional, overrides resource_group)
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| principal_id | Yes | ||
| role_definition_name | Yes | ||
| resource_group | No | ||
| scope | No |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |