Share via

IAM permissions for Key Vault

DG001 386 Reputation points Microsoft Employee
2024-01-25T20:38:56.5866667+00:00

Hello, I would like some suggestions on what permission are needed to grant users ONLY access to change 'networking information' of Key vaults?
I have tried Key Vault Reader and this allows them network access BUT it also allows them to modify the access policy and basically create their own policy to view the secrets and keys, which I want to avoid.

Azure Key Vault
Azure Key Vault
An Azure service that is used to manage and protect cryptographic keys and other secrets used by cloud apps and services.
1,194 questions

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Givary-MSFT 30,931 Reputation points Microsoft Employee
    2024-02-09T10:53:26.95+00:00

    @DG001 Apologies for the delayed response, yes you are correct if the current RBAC roles have more privileges, then you can go for custom role option or clone the existing role and modify the changes which are needed for the task. Let me know if you have any further questions, feel free to post back.

    0 comments