Insufficient Permissions for Import Certificate into Key Vault

Question

I am an external user for one of my client accounts. I have owner permissions. I am trying to import a certificate into a key vault. The key vault has the Vault Access Policy. As the owner, I have full access to this resource. However, when I try to import a certificate, I am getting an insufficient permission error. I have tried to add an Access Policy but can't find a principal to assign it to.

Answer 1

Hi Carolyn,

1. Verify Access Policies: Double-check the access policies configured on the Key Vault. As an owner, you should have full access, but you may need a explicit permission for importing
2. Add Explicit permission in Access Policy: If necessary, add an access policy explicitly granting permissions for importing certificates. To do this:
   • Go to the Azure portal and navigate to the Key Vault.
   • Select "Access policies" from the left menu.
   • Click on "Add Access Policy."
   • Choose the appropriate permissions (e.g., "Import" for certificates).
   • In the "Select principal" section, you may need to search for and select the application or your object ID
   • Click "Add" to save the access policy.

Please check below images for reference

Please check this doc for ref https://learn.microsoft.com/en-us/azure/key-vault/general/assign-access-policy?tabs=azure-portal

kindly accept answer if it helps,

Thanks

Deepanshu

Answer 2

This is just too small a shop to use Azure Key Vault. I was able to add a custom domain and secure it by directly importing the app service certificate