Total de permissões
12Actions
0NotActions
0DataActions
0Role ID
14b46e9e-c2b7-41b4-b07b-48a6ebf60603Categoria
SecurityRisk Tier
Contributor (CTB)Risk Tier: Contributor
Grants full write access to create and manage all resources but cannot assign roles or manage access to others.
Descrição
MicrosoftPerform any action on the keys of a key vault, except manage permissions. Only works for key vaults that use the 'Azure role-based access control' permission model.
Role Definition (JSON)
{"Name": "Key Vault Crypto Officer","Id": "14b46e9e-c2b7-41b4-b07b-48a6ebf60603","IsCustom": false,"Description": "Perform any action on the keys of a key vault, except manage permissions. Only works for key vaults that use the 'Azure role-based access control' permission model.","Actions": [],"NotActions": [],"DataActions": [],"NotDataActions": [],"AssignableScopes": ["/"]
Assignable Scopes
/
PowerShell
Get-AzRoleDefinition -Name "Key Vault Crypto Officer"
Azure CLI
az role definition list --name "Key Vault Crypto Officer"