Sessions

Start a subscription and use its Azure Resource Manager token.

Every subscription the tenant exposes is a session. Starting one requests an Azure Resource Manager token for the signed-in account and keeps it fresh from the tenant’s token cache.

rolle start "Contoso Production"
eval "$(rolle env "Contoso Production")"   # AZURE_ACCESS_TOKEN, AZURE_SUBSCRIPTION_ID, AZURE_TENANT_ID
rolle shell "Contoso Production"           # a terminal with the same variables
rolle console "Contoso Production"         # the Azure portal for the tenant

The desktop app offers the same actions on the session row: Start, Open terminal, Open console, and Copy credentials as env. Sessions renew on their own while the tenant sign-in is valid and stop when it expires.

rolle does not write into the az CLI token cache. Tools that read AZURE_ACCESS_TOKEN or take a token on the command line work directly; for az itself, sign in with az login.