Problem with Access Policy

Question

When I create a Vault in the Azure powershell and create an Access policy there and then go to the Azure portal I can access everything including the Access policy

When I create a Vault in the portal I can not access anything even though I am owner.
When I add roles I can get to parts like secrets etc but never to access policy.

What am I doing wrong?

Answer 1

When you create an Azure Keyvault, make sure you have created it with RBAC, to support your Azure account roles.

Reference: Provide access to Key Vault keys, certificates, and secrets with an Azure role-based access control

Answer 2

Hi @kidvranic ,

I'm glad that you were able to resolve your issue and thank you for posting your solution so that others experiencing the same thing can easily reference this! Since the Microsoft Q&A community has a policy that "The question author cannot accept their own answer. They can only accept answers by others ", I'll repost your solution in case you'd like to "Accept " the answer.

Issue:

When you created a Vault using Azure Powershell and created an Access policy, you were able to access everything in the Key Vault, including the access policy. However, when you created the vault in via the Azure portal, you could not access anything, even though you are the Owner.

Solution:

You needed to change your permission model from "Azure role-based access control" to "Vault access policy." This is likely because you needed vault-level permissions to the data plane , which allows you to work with the data stored in a key vault. More details here:

https://learn.microsoft.com/en-us/azure/key-vault/general/security-features#privileged-access

https://learn.microsoft.com/en-us/azure/key-vault/general/assign-access-policy?tabs=azure-portal

Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.