CODEWITHSUNDEEP
azureazure-keyvaultazure-security
John John
John John

Reputation: 1

Unable to create Azure Key Vault secret inside our Microsoft Partner centre. "The operation "Set" is not enabled in this key vault's access policy."

We are managing our customers' azure subscriptions using Microsoft Partner Centre >> and using a username I create a new Azure Vault for a customer>> but when I tried to create a new Secret inside the Azure Vault , I got this error:-

The operation "Set" is not enabled in this key vault's access policy.

enter image description here

now when I access the Key Vault >> Access Policy >> I am unable to add the login username which I used to create the Key Vault inside the Key Vault access policy, where I am only able to add the office 365 admin:-

enter image description here

so any advice why i am able to create a new Key Vault, while i am unable to add Secrets inside it?

Upvotes: 0

Views: 2002

Answers (1)

Allen Wu
Allen Wu

Reputation: 16438

When you create the Key vault, you should add the CSP access policy rather than normal access policy.

enter image description here

After you click on it, you can specify CSP security group (it has shown the steps to get the group id).

enter image description here

Then the CSP user can create secret in this key vault after it's created.

Upvotes: 0

Related Questions