Key Vault Administrator

Azure RBAC · Security · Contributor

Key Vault Administrator

ContributorIAM ScopeSecurity·11 permissões

Dado verificado em · Fonte

Total de permissões

11

Actions

0

NotActions

0

DataActions

0
Role ID
00482a5a-887f-4fb3-b363-3b7fe8e74483
Categoria
Security
Risk Tier
Contributor (CTB)
Risk Tier: Contributor

Grants full write access to create and manage all resources but cannot assign roles or manage access to others.

Descrição

Microsoft

Perform all data plane operations on a key vault and all objects in it, including certificates, keys, and secrets. Cannot manage key vault resources or manage role assignments. Only works for key vaults that use the 'Azure role-based access control' permission model.

Permissões

MicrosoftCarregando...Azure built-in roles

Role Definition (JSON)

{
"Name": "Key Vault Administrator",
"Id": "00482a5a-887f-4fb3-b363-3b7fe8e74483",
"IsCustom": false,
"Description": "Perform all data plane operations on a key vault and all objects in it, including certificates, keys, and secrets. Cannot manage key vault resources or manage role assignments. Only works for key vaults that use the 'Azure role-based access control' permission model.",
"Actions": [],
"NotActions": [],
"DataActions": [],
"NotDataActions": [],
"AssignableScopes": [
"/"
]

Assignable Scopes

/

PowerShell

Get-AzRoleDefinition -Name "Key Vault Administrator"

Azure CLI

az role definition list --name "Key Vault Administrator"
Ver a documentação oficial na Microsoft Learn