Key Vault Data Access Administrator
PrivilegiadaAccess ManagementIAM ScopeSecurity·10 permissões
Dado verificado em · Fonte
Total de permissões
10Actions
0NotActions
0DataActions
0Role ID
8b54135c-b56d-4d72-a534-26097cfdc8d8Categoria
SecurityRisk Tier
Access Management (AM)Risk Tier: Access Management
Grants the ability to manage security configurations, role assignments, or identity services without full resource control.
Descrição
MicrosoftManage access to Azure Key Vault by adding or removing role assignments for the Key Vault Administrator, Key Vault Certificates Officer, Key Vault Crypto Officer, Key Vault Crypto Service Encryption User, Key Vault Crypto User, Key Vault Reader, Key Vault Secrets Officer, or Key Vault Secrets User roles. Includes an ABAC condition to constrain role assignments.
Role Definition (JSON)
{"Name": "Key Vault Data Access Administrator","Id": "8b54135c-b56d-4d72-a534-26097cfdc8d8","IsCustom": false,"Description": "Manage access to Azure Key Vault by adding or removing role assignments for the Key Vault Administrator, Key Vault Certificates Officer, Key Vault Crypto Officer, Key Vault Crypto Service Encryption User, Key Vault Crypto User, Key Vault Reader, Key Vault Secrets Officer, or Key Vault Secrets User roles. Includes an ABAC condition to constrain role assignments.","Actions": [],"NotActions": [],"DataActions": [],"NotDataActions": [],"AssignableScopes": ["/"]
Assignable Scopes
/
PowerShell
Get-AzRoleDefinition -Name "Key Vault Data Access Administrator"
Azure CLI
az role definition list --name "Key Vault Data Access Administrator"