# MCP and Evidence Path

## Evidence path

Ground recommendations in Microsoft documentation first.

1. Azure RBAC overview for the control model and scope hierarchy.
2. Azure RBAC best practices for least privilege, scope minimization, and assignment hygiene.
3. Azure built-in roles and role-definition docs to match actions before inventing a custom role.
4. Azure MCP tool references, when available, to inspect role information or confirm live context with less guesswork.

If Azure MCP is available and supported in the session, `role` is the most relevant namespace for this skill. Use it to reduce guesswork, not to bypass the need for least-privilege reasoning.
