Access policies for Keyvaults decommission

Question

Hello,

I'm having a question relating Access policies.

Is it planned into some Azure plan to decommission Access policies for Keyvaults ?
If yes could you tell/give the dead lines and official communication pages ?
Thanks,

JR

Answer 1

Hello Jean Rene BLAIVE,

Thanks for your question.

Currently, there is no specific decommission date provided yet for Access Policies, however, the move towards using Azure RBAC is actively encouraged to future-proof.

Azure RBAC is built on Azure Resource Manager and provides centralized access management of Azure resources. With Azure RBAC you control access to resources by creating role assignments, which consist of three elements: a security principal, a role definition (predefined set of permissions), and a scope (group of resources or individual resource).

The access policy model is a legacy authorization system, native to Key Vault, which provides access to keys, secrets, and certificates. You can control access by assigning individual permissions to security principals (users, groups, service principals, and managed identities) at Key Vault scope.

See: https://learn.microsoft.com/en-us/azure/key-vault/general/rbac-access-policy

https://learn.microsoft.com/en-us/azure/key-vault/general/rbac-migration

Please let me know if you have further questions.

If the above information was useful, please remember to 'Accept Answer'