Total de permissões
11Actions
0NotActions
0DataActions
0Role ID
b86a8fe4-44ce-4948-aee5-eccb2c155cd7Categoria
SecurityRisk Tier
Contributor (CTB)Risk Tier: Contributor
Grants full write access to create and manage all resources but cannot assign roles or manage access to others.
Descrição
MicrosoftPerform any action on the secrets of a key vault, except manage permissions. Only works for key vaults that use the 'Azure role-based access control' permission model.
Role Definition (JSON)
{"Name": "Key Vault Secrets Officer","Id": "b86a8fe4-44ce-4948-aee5-eccb2c155cd7","IsCustom": false,"Description": "Perform any action on the secrets of a key vault, except manage permissions. Only works for key vaults that use the 'Azure role-based access control' permission model.","Actions": [],"NotActions": [],"DataActions": [],"NotDataActions": [],"AssignableScopes": ["/"]
Assignable Scopes
/
PowerShell
Get-AzRoleDefinition -Name "Key Vault Secrets Officer"
Azure CLI
az role definition list --name "Key Vault Secrets Officer"