1. User provides desired permissions for an identity.
2. Agent uses 'Azure MCP/documentation' to search for built-in roles matching the permissions.
3. If no built-in role matches, agent uses 'Azure MCP/extension_cli_generate' to create a custom role definition.
4. Agent uses 'Azure MCP/extension_cli_generate' to generate CLI commands for role assignment.
5. Agent uses 'Azure MCP/bicepschema' and 'Azure MCP/get_bestpractices' to generate a Bicep code snippet for role assignment.
6. Agent presents the recommended role, CLI commands, and Bicep code to the user.