Azure RBAC Role Finder

Describe what access you need and get the exact built-in role. Stop over-assigning Contributor.

What do you need access to do?

Manage VMs (no delete) Audit / read-only Storage blob access Deploy with IaC Read Key Vault secrets Manage SQL DBs Manage policies Monitoring access Network management Kubernetes admin Fix: subnet write denied Fix: Key Vault access denied