Merge pull request #301075 from jenniferf-skc/CopilotforRoles

Adding info on Copilot for Adding role assignments

Author: v-ccolin

articles/role-based-access-control/media/role-assignments-portal/copilot-for-role-assignment.png

@@ -3,10 +3,12 @@
 metadata:
   title: Assign Azure roles using the Azure portal - Azure RBAC
   description: Learn how to grant access to Azure resources for users, groups, service principals, or managed identities using the Azure portal and Azure role-based access control (Azure RBAC).
-  author: jenniferf-skc
+
+  author: jenniferf-skc 
   ms.author: jfields
   manager: pmwongera
-  ms.date: 11/11/2024
+  ms.date: 08/01/2025
+
   ms.service: role-based-access-control
   ms.topic: how-to
   ms.custom:
@@ -73,6 +75,20 @@ procedureSection:
           You can search for a role by name or by description. You can also filter roles by type and category.
 
         ![Screenshot of Add role assignment page with Role tab.](./media/shared/roles.png)
+
+        
+        Note, If you're unsure of which role you need to assign, you can now use Copilot to help you select the appropriate role. (Limited preview. This capability is being deployed in stages, so it might not be available yet in your tenant or your interface might look different.)
+        
+      - |
+        (Optional) In the **Role** tab, click the **Copilot can help pick role** button. The Copilot dialog box opens. 
+
+        ![Screenshot of Copilot button in the Add role assignment page.](./media/role-assignments-portal/copilot-for-role-assignment.png)
+        
+        In the dialog box, you can add descriptive prompts to tell Copilot your requirements for the role, and what you need a user to be authorized to do, for example, *"Help me select a role to deploy and manage Azure functions."*, or *"Which role should I use if I
+        want a user to manage and view a workspace?"* Using phrases such as *'Help me select...'* or *'Which role should I use to...'* helps Copilot understand your intent more clearly in order to deliver the best results.
+
+        From the direction of your prompt, Copilot suggests a role, or multiple roles, based on the requirements provided. Copilot asks you to confirm by **Select permissions**. Copilot then recommends a role based on the
+        criteria provided. You can **Select role**, or you can ask Copilot to **Recommend other roles**. If you select **Select role**, you're taken back to the **Add role assignment** page where you can select the recommended role and view its details.
       - |
         If you want to assign a privileged administrator role, select the **Privileged administrator roles** tab to select the role.
 

articles/role-based-access-control/role-assignments-portal.yml

@@ -1,12 +1,12 @@
 ---
  title: include file
  description: include file
- author: rolyon
+ author: jenniferf-skc
  ms.service: role-based-access-control
  ms.topic: include
- ms.date: 01/08/2021
- ms.author: rolyon
+ ms.date: 08/01/2025
+ ms.author: jfields
  ms.custom: include file
 ---
 
-When you assign roles, you must specify a scope. Scope is the set of resources the access applies to. In Azure, you can specify a scope at four levels from broad to narrow: [management group](../../articles/governance/management-groups/overview.md), subscription, [resource group](../../articles/azure-resource-manager/management/overview.md#resource-groups), and resource.
+When you assign roles, you must specify a scope. A Scope is the set of resources the access applies to. In Azure, you can specify a scope at four levels from broad to narrow: [management group](../../articles/governance/management-groups/overview.md), subscription, [resource group](../../articles/azure-resource-manager/management/overview.md#resource-groups), and resource.