Key Vault Crypto Service Encryption User
ContributorIAM ScopeSecurity·6 permissões
Dado verificado em · Fonte
Total de permissões
6Actions
0NotActions
0DataActions
0Role ID
e147488a-f6f5-4113-8e2d-b22465e65bf6Categoria
SecurityRisk Tier
Contributor (CTB)Risk Tier: Contributor
Grants full write access to create and manage all resources but cannot assign roles or manage access to others.
Descrição
MicrosoftRead metadata of keys and perform wrap/unwrap operations. Only works for key vaults that use the 'Azure role-based access control' permission model.
Role Definition (JSON)
{"Name": "Key Vault Crypto Service Encryption User","Id": "e147488a-f6f5-4113-8e2d-b22465e65bf6","IsCustom": false,"Description": "Read metadata of keys and perform wrap/unwrap operations. Only works for key vaults that use the 'Azure role-based access control' permission model.","Actions": [],"NotActions": [],"DataActions": [],"NotDataActions": [],"AssignableScopes": ["/"]
Assignable Scopes
/
PowerShell
Get-AzRoleDefinition -Name "Key Vault Crypto Service Encryption User"
Azure CLI
az role definition list --name "Key Vault Crypto Service Encryption User"