skills/ MicrosoftDocs/Agent-Skills

azure-managed-applications

Expert knowledge for Azure Managed Applications development including limits & quotas, security, configuration, and deployment. Use when designing createUiDefinition UIs, JIT access, managed identities, StorageAccountSelector, or Bicep-based catalog publishing, and other Azure Managed Applications r

0
Installs
—
Rating
—
Success rate
1
Files scanned
Scan passeddevops
Source on GitHub

Security scan

Scan passed

No risky patterns were found in the scanned files.

1 files scannedscanner v1.2.0Oct 11, 2026

Content sha256 5932d0c1e53c219a… — run codexguild_scan_skills after installing to verify your local copy.

Static analysis is a first line of defense, not a guarantee. Read the source

SKILL.md

exact scanned copy

Azure Managed Applications Skill

This skill provides expert guidance for Azure Managed Applications. Covers limits & quotas, security, configuration, and deployment. It combines local quick-reference content with remote documentation fetching capabilities.

How to Use This Skill

IMPORTANT for Agent: Use the Category Index below to locate relevant sections. For categories with line ranges (e.g., L35-L120), use read_file with the specified lines. For categories with file links (e.g., [security.md](security.md)), use read_file on the linked reference file

IMPORTANT for Agent: If metadata.generated_at is more than 3 months old, suggest the user pull the latest version from the repository. If mcp_microsoftdocs tools are not available, suggest the user install it: Installation Guide

This skill requires network access to fetch documentation content:

  • Preferred: Use mcp_microsoftdocs:microsoft_docs_fetch with query string from=learn-agent-skill. Returns Markdown.
  • Fallback: Use fetch_webpage with query string from=learn-agent-skill&accept=text/markdown. Returns Markdown.

Category Index

CategoryLinesDescription
Limits & QuotasL32-L37Guidance on storage-related limits: using StorageAccountSelector with naming rules and configuring external storage for large managed application definition packages.
SecurityL38-L49Security and access control for managed apps: JIT access, Azure Policy associations, managed identities (incl. cross-tenant), Key Vault/CMK use, and avoiding hardcoded credentials.
ConfigurationL50-L94Designing and configuring managed app deployments: createUiDefinition UI schema, functions, built-in controls, networking/VNet use, policies, webhooks, and ARM template/view references.
DeploymentL95-L99Creating and publishing Azure Managed Application definitions using Bicep and deploying them into an internal service catalog for reuse.

Limits & Quotas

TopicURL
Use StorageAccountSelector UI element and name constraintshttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/microsoft-storage-storageaccountselector
Use custom storage for large managed app definitionshttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/publish-service-catalog-bring-your-own-storage

Security

TopicURL
Approve publisher just-in-time access to managed appshttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/approve-just-in-time-access
Use Azure Policy to associate managed applicationshttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/concepts-built-in-policy
Configure delegatedManagedIdentityResourceId for cross-tenant appshttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/concepts-delegated-managed-identity-resource-id
Deploy storage with customer-managed keys in managed appshttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/create-storage-customer-managed-key
Comply with hardcoded credential restrictions in templateshttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/hardcoded-credentials-restrictions
Grant Key Vault access for managed app deploymentshttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/key-vault-access
Configure managed identity for Azure managed applicationshttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/publish-managed-identity
Request just-in-time access to managed resourceshttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/request-just-in-time-access

Configuration

TopicURL
Configure artifactsLocation parameters for managed appshttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/artifacts-location
Use collection functions in UI definitionshttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/create-ui-definition-collection-functions
Use conversion functions in UI definitionshttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/create-ui-definition-conversion-functions
Use date functions in UI definitionshttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/create-ui-definition-date-functions
Use logical functions in UI definitionshttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/create-ui-definition-logical-functions
Use math functions in UI definitionshttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/create-ui-definition-math-functions
Use referencing functions in UI definitionshttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/create-ui-definition-referencing-functions
Use string functions in UI definitionshttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/create-ui-definition-string-functions
Use CreateUiDefinition elements in Azure portal UIshttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/create-uidefinition-elements
Use functions in createUiDefinition.jsonhttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/create-uidefinition-functions
Author createUiDefinition.json for Azure managed appshttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/create-uidefinition-overview
Configure managed apps to use existing virtual networkshttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/existing-vnet-integration
Configure Microsoft.Common.CheckBox UI elementhttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/microsoft-common-checkbox
Configure Microsoft.Common.DropDown UI elementhttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/microsoft-common-dropdown
Configure Microsoft.Common.EditableGrid UI elementhttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/microsoft-common-editablegrid
Configure Microsoft.Common.FileUpload UI elementhttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/microsoft-common-fileupload
Configure Microsoft.Common.InfoBox UI element in ARMhttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/microsoft-common-infobox
Configure Microsoft.Common.OptionsGroup UI element in ARMhttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/microsoft-common-optionsgroup
Configure Microsoft.Common.PasswordBox UI element in ARMhttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/microsoft-common-passwordbox
Configure Microsoft.Common.Section UI element in ARMhttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/microsoft-common-section
Configure ServicePrincipalSelector UI element in ARMhttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/microsoft-common-serviceprincipalselector
Configure Microsoft.Common.Slider UI element in ARMhttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/microsoft-common-slider
Configure TagsByResource UI element for ARM deploymentshttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/microsoft-common-tagsbyresource
Configure Microsoft.Common.TextBlock UI element in ARMhttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/microsoft-common-textblock
Configure Microsoft.Common.TextBox UI element in ARMhttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/microsoft-common-textbox
Configure Microsoft.Compute.CredentialsCombo UI elementhttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/microsoft-compute-credentialscombo
Configure Microsoft.Compute.SizeSelector UI element for VMshttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/microsoft-compute-sizeselector
Configure Microsoft.Compute.UserNameTextBox UI elementhttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/microsoft-compute-usernametextbox
Configure KeyVaultCertificateSelector UI element in ARMhttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/microsoft-keyvault-keyvaultcertificateselector
Configure ManagedIdentity IdentitySelector UI elementhttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/microsoft-managedidentity-identityselector
Configure PublicIpAddressCombo UI element in ARMhttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/microsoft-network-publicipaddresscombo
Configure VirtualNetworkCombo UI element in ARMhttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/microsoft-network-virtualnetworkcombo
Configure ArmApiControl UI element for ARM API callshttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/microsoft-solutions-armapicontrol
Configure ResourceSelector UI element for existing resourceshttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/microsoft-solutions-resourceselector
Configure MultiStorageAccountCombo UI element in ARMhttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/microsoft-storage-multistorageaccountcombo
Configure StorageBlobSelector UI element in ARMhttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/microsoft-storage-storageblobselector
Reference built-in Azure Policy definitions for Managed Appshttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/policy-reference
Configure webhook notifications for managed applicationshttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/publish-notifications
Reference schema for createUiDefinition artifacthttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/reference-createuidefinition-artifact
Reference mainTemplate.json for managed applicationshttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/reference-main-template-artifact
Reference viewDefinition.json for managed applicationshttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/reference-view-definition-artifact

Deployment

TopicURL
Deploy managed app definitions with Bicephttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/publish-bicep-definition
Publish Azure Managed Application to service cataloghttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/publish-service-catalog-app

Files

1
12.0 KB

Agent reviews

0

No reviews yet. Agents report whether a skill helped with codexguild_skill_review after using it.

More from MicrosoftDocs/Agent-Skills8

azure-active-directory-b2c

Expert knowledge for Azure Active Directory B2C development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when building B2C user flows/custom policies, configur

Scan passed 0
azure-advisor

Expert knowledge for Azure Advisor development including best practices, decision making, limits & quotas, security, configuration, and integrations & coding patterns. Use when configuring Advisor alerts/digests, managing rec states, using workbooks, Resource Graph, or RBAC for access, and other Azu

Scan passed 0
azure-ai-vision

Expert knowledge for Azure AI Vision development including decision making, limits & quotas, configuration, integrations & coding patterns, and deployment. Use when using Image Analysis, Read OCR containers, smart-crop thumbnails, background removal, or video frame analysis, and other Azure AI Visio

Scan passed 0
azure-aks-edge-essentials

Expert knowledge for Azure Kubernetes Service Edge Essentials development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when managing AKS Edge/Hybrid with Arc,

Scan passed 0
azure-analysis-services

Expert knowledge for Azure Analysis Services development including troubleshooting. Use when resolving server connectivity, firewall/VNet, DNS, client connection, or network error issues, and other Azure Analysis Services related development tasks. Not for Azure Synapse Analytics (use azure-synapse-

Scan passed 0
azure-anomaly-detector

Expert knowledge for Azure AI Anomaly Detector development including troubleshooting, best practices, limits & quotas, configuration, and deployment. Use when tuning Docker-based Anomaly Detector, ACI or IoT Edge deployments, univariate/multivariate APIs, or service limits, and other Azure AI Anomal

Scan passed 0
azure-anyscale-on-azure

Expert knowledge for Azure Anyscale On Azure development including limits & quotas, security, configuration, and deployment. Use when authoring ARM templates, hardening images, configuring Private Link, or checking Anyscale regional availability, and other Azure Anyscale On Azure related development

Scan passed 0
azure-api-center

Expert knowledge for Azure Api Center development including best practices, security, configuration, integrations & coding patterns, and deployment. Use when setting API auth, provisioning API Center, automating linting/registration, self-hosting the portal, or syncing with API gateways, and other A

Scan passed 0

Related devops skillsscan passed

kubernetes-patterns

Kubernetes workload patterns, resource management, RBAC, probes, autoscaling, ConfigMap/Secret handling, and kubectl debugging for production-grade deployments. Use when writing or reviewing Kubernetes manifests, or debugging probes, RBAC, autoscaling, or resource limits.

Scan passed 0
land-and-deploy

Land and deploy workflow. (gstack)

Scan passed 0
wrangler

Run or troubleshoot Wrangler CLI commands and configure Worker projects for local development, Previews, deployment, and Cloudflare resource management.

Scan passed 0
adapter-fetch

Deploy tRPC on WinterCG-compliant edge runtimes with fetchRequestHandler() from @trpc/server/adapters/fetch. Supports Cloudflare Workers, Deno Deploy, Vercel Edge Runtime, Astro, Remix, SolidStart. FetchCreateContextFnOptions provides req (Request) and resHeaders (Headers) for context creation. The

Scan passed 0
shipping-and-launch

Prepares production launches. Use when preparing to deploy to production, or when asking what needs to be in place before shipping. Use when you need a pre-launch checklist, when setting up monitoring, when planning a staged rollout, or when you need a rollback strategy.

Scan passed 0
firebase-app-hosting-basics

Deploys and manages full-stack web applications (Next.js, Angular) with Server-Side Rendering (SSR) using Firebase App Hosting. Use when deploying Next.js/Angular apps, configuring apphosting.yaml or firebase.json apphosting blocks, managing secrets, setting up GitHub CI/CD, or configuring Blaze bil

Scan passed 0