What is the minimal privilege to grant permission to rotate and list Azure APIM subscription key by REST API

Question

Hi,

We're enabling a specific API consumer to rotate their own API subscription key via APIM REST API permissions.

We require permissions for:

• Listing secrets: https://learn.microsoft.com/en-us/rest/api/apimanagement/subscription/list-secrets
• Regenerating primary key: https://learn.microsoft.com/en-us/rest/api/apimanagement/subscription/regenerate-primary-key

App Registration and service principal are adopted and it works.

Currently using the Contributor Role, but we think it grants broader privileges than necessary.

Can you advise a proper Role in our use case ?

Thank you

Answer 1

@Amy Z Here are list of minimum permissions required for listing and rotating Subscription API Key.

For more information, please refer this document.