Unable to create a cert in Azure keyvault

Question

I am attempting to create a new cert in Azure Keyvault and it continues to fail.
I am a keyvault admin and certificate officer for the keyvault and I created the access policy and gave the account full permission (following the link included below).

Any insight on where I need to look next, or what permission aside from Global Admin, Keyvault admin and Certificate officer is needed.

Here is error statement

The user, group or application 'appid=' does not have certificates create permission on key vault . For help resolving this issue, please see https://go.microsoft.com/fwlink/?linkid=2125287

Answer 1

Hi Dan, here are a couple of things to try.

Hi Dan,

I just created a key vault, tried to add a new cert and of course it fails as expected.

Then I assigned myself the IAM roles: Keyvault admin and cert officer roles - just as you said.

Then I refreshed my browser in order to update my token/roles. (no logout needed)

And now I was successful in creating a new cert.

Is it possible you simply need to refresh your access token? or did someone change the role assignment method under the key vault settings? or are you using PIM?

Good luck.