Modifying/adding subscription in order to enable Azure Key Vault; only for administrator or for all employees?

Question

Hi to all, I'm in the process of evaluating Purview for encrypting data across the organization, but I'm having some questions regarding the customer keys deployment process, in relation to license requirements. As far as I understand, to be able to use Azure Key Vault, an Azure license is needed (additionally to the 365 license). What is missing from documentation thought, is if the Azure license is required for each user account, or only for the admin to be able to enable and deploy Key Vault. What I need in particular, is the ability to create an Azure Key Vault, to be able to deploy Customer Keys for file encryption across 365 services and apply to all groups/users.

Answer 1

Azure services are not licenced as such, and certainly not on a per-user basis. You pay for the use of the resource. You will need to create an Azure subscription and then deploy a Key Vault into that subscription. You will be charged for the use of the Key Vault based on the number of requests for secrets you send to the Key Vault. The specific users accessing this do not matter, it is just the total amount of requests.