I'm getting the error ""The operation is not allowed by RBAC. If role assignments were recently changed, please wait several minutes for role assignments to become effective." when trying to enter a secret in the key vault.

Question

I'm getting the error ""The operation is not allowed by RBAC. If role assignments were recently changed, please wait several minutes for role assignments to become effective." when trying to enter a secret in the key vault.

Todd Pearson 0

I'm getting the error ""The operation is not allowed by RBAC. If role assignments were recently changed, please wait several minutes for role assignments to become effective." when trying to enter a secret in the key vault. I've been told I need an Azure AD Premium P2 license, but I'm seeing now where Azure AD has switched to Microsoft Entra. I started the MS Entra ID P2 license free trial and then refreshed, signed out and back in, and still getting the same error. Please help!

JamesTran-MSFT 36,871 Reputation points Microsoft Employee

2023-10-18T19:31:53.9833333+00:00

@Todd Pearson

I wanted to check in and see if you had any other questions or if you were able to resolve this issue?

If you have any other questions, please let me know. Thank you for your time and patience throughout this issue.

If the information helped address your question, please Accept the answer. This will help us and also improve searchability for others in the community who might be researching similar information.
Todd Pearson 0 Reputation points

2023-10-19T18:53:03.92+00:00

@JamesTran-MSFT I was able to assign the role of Key Vault Administrator to my subscription, and this resolved my error. What I'm really having trouble with is activating my Microsoft Entra ID P2 free trial license (Formerly the Azure AD P2 Premium free trial license). I go into my activation email and click on the "Activate free trail>" button, and when I get the Microsoft sign-in, it won't let me use either my regular email or my work email to activate it. It tells me "You can't sign in here with a personal account. Use your work or school account instead." Below the sign in there is another smaller option for keyed sign in, looking like it needs a USB thumb drive. I'm suspecting it needs an O365 global admin account, which I don't have. I need this free trial license to finish a project.

1 answer

Your answer

JamesTran-MSFT 36,871 Reputation points Microsoft Employee

2023-10-18T19:31:53.9833333+00:00

@Todd Pearson

I wanted to check in and see if you had any other questions or if you were able to resolve this issue?

If you have any other questions, please let me know. Thank you for your time and patience throughout this issue.

If the information helped address your question, please Accept the answer. This will help us and also improve searchability for others in the community who might be researching similar information.
Todd Pearson 0 Reputation points

2023-10-19T18:53:03.92+00:00

@JamesTran-MSFT I was able to assign the role of Key Vault Administrator to my subscription, and this resolved my error. What I'm really having trouble with is activating my Microsoft Entra ID P2 free trial license (Formerly the Azure AD P2 Premium free trial license). I go into my activation email and click on the "Activate free trail>" button, and when I get the Microsoft sign-in, it won't let me use either my regular email or my work email to activate it. It tells me "You can't sign in here with a personal account. Use your work or school account instead." Below the sign in there is another smaller option for keyed sign in, looking like it needs a USB thumb drive. I'm suspecting it needs an O365 global admin account, which I don't have. I need this free trial license to finish a project.

Answer 1

Luke Murray 11,351 MVP

Hi, Todd

When using Keyvault, make sure that the user you are using has the relevant role:

Azure built-in roles for Key Vault data plane operations

Check to see whether the key vault is RBAC enabled:

Enable Azure RBAC permissions - existing vault

Share via

I'm getting the error ""The operation is not allowed by RBAC. If role assignments were recently changed, please wait several minutes for role assignments to become effective." when trying to enter a secret in the key vault.

1 answer

Your answer