Total de permissões
9Actions
0NotActions
0DataActions
0Role ID
12338af0-0e69-4776-bea7-57ae8d297424Categoria
SecurityRisk Tier
Data Plane (DP)Risk Tier: Data Plane
Grants access to data stored within services (blobs, queues, secrets, keys) without management plane control.
Descrição
MicrosoftPerform cryptographic operations using keys. Only works for key vaults that use the 'Azure role-based access control' permission model.
Role Definition (JSON)
{"Name": "Key Vault Crypto User","Id": "12338af0-0e69-4776-bea7-57ae8d297424","IsCustom": false,"Description": "Perform cryptographic operations using keys. Only works for key vaults that use the 'Azure role-based access control' permission model.","Actions": [],"NotActions": [],"DataActions": [],"NotDataActions": [],"AssignableScopes": ["/"]
Assignable Scopes
/
PowerShell
Get-AzRoleDefinition -Name "Key Vault Crypto User"
Azure CLI
az role definition list --name "Key Vault Crypto User"