Developer tool for Azure RBAC permissions. Select resources and actions you need — get the least-privilege built-in role and custom role definitions.
▶ Try it live: leastprivilegestudio.com — no install, runs entirely in your browser.
- Browse all Azure resources by category (Compute, Networking, Storage, etc.)
- Search by resource name, abbreviation (vm, aks, nsg), or permission path
- Select individual operations with Read/Write/Delete/Action grouping
- Import from built-in role — select a role and see all its permissions checked
- Import from custom role JSON — paste an existing role definition
- Role matching engine — find the least-privilege built-in role
- Custom role JSON export in Azure format
- Dependency hints (e.g. "VMs require managed disks")
- 867+ built-in roles, 18,000+ operations from the Azure API
MIT — Simon Vedder · simonvedder.com