This extension improves the Microsoft Azure Portal experience with practical customization, privacy, resource management, and RBAC visibility features. ## Key features - Configure a custom Azure Portal background image and opacity. - Mask the signed-in username and Microsoft Entra tenant name. - Mask UUID-formatted Subscription IDs displayed throughout Azure Portal. - Protect sensitive information during screenshots and screen sharing. - Highlight empty resource groups to identify unused resources and cleanup candidates. - Display direct user RBAC assignments in a Subscription and Resource Group hierarchy. - Show role names such as Owner, Contributor, and Reader. - Exclude inherited roles, group assignments, service principals, managed identities, Azure Lighthouse assignments, and resource-level assignments. - Display the RBAC panel across authenticated Azure Portal pages. - Enable the RBAC panel from Extension Settings. It is disabled by default. - Authenticate independently with Microsoft Entra ID using OAuth. - Automatically refresh Azure Resource Manager access tokens. - Optionally share anonymous feature-usage counts. Telemetry is disabled by default. ## RBAC requirements To use ARM authentication and RBAC features, register a Microsoft Entra ID application as a Single-page application and grant the delegated Azure Service Management user_impersonation permission. To display user names in the RBAC panel, add the Microsoft Graph delegated permission User.ReadBasic.All and grant admin consent. The signed-in user must have permission to read role assignments for the target subscriptions. This permission is normally provided by the built-in Azure Reader role. After changing API permissions, reload the extension and sign in again. If the required Microsoft Graph permission is unavailable, the extension may display principal IDs instead of user names. ## Privacy and security The extension does not depend on the Azure Portal session token for ARM authentication. OAuth tokens are stored locally in Chrome extension storage and refreshed automatically when possible. Optional telemetry only sends anonymous feature names and usage counts. It does not send usernames, tenant names, Subscription IDs, URLs, resource names, or OAuth tokens. Telemetry is disabled by default. This extension is an independent community project. It is not affiliated with, endorsed by, or an official product of Microsoft.