Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

CopyKeys script no longer work when Azure Key Vault using Azure RBAC permission model #78351

Closed
ssivas opened this issue Jul 14, 2021 · 4 comments

Comments

@ssivas
Copy link
Contributor

ssivas commented Jul 14, 2021

"CopyKeys" script no longer work when Azure Key Vault using Azure RBAC permission model instead Access policy model .

Looking at CopyKeys script, it completely relay on set-AzKeyVaultAccessPolicy cmdlet which belong to Access policy model.

I think this script need to updated to work with Azure Key Vault using Azure RBAC permission model. Thanks

Example: we get following error, which make sense that there are no access policy present since key vault use RBAC based role.

User with user id: XXX does not have access to the key vault XXX. Permitted object ids include - XXX


Document Details

Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

@SatishBoddu-MSFT
Copy link
Contributor

Hello @ssivas Thanks for the feedback!

Our SME will review the issue and will get back to you.

@ssivas
Copy link
Contributor Author

ssivas commented Jul 15, 2021

Hello @ssivas Thanks for the feedback!

Our SME will review the issue and will get back to you.

Thanks @SatishBoddu-MSFT , Here is similar issue from Microsoft Q&A : https://docs.microsoft.com/en-us/answers/questions/475322/index.html .

@BharathNimmala-MSFT
Copy link
Contributor

BharathNimmala-MSFT commented Jul 21, 2021

@ssivas/@Swenzzon My sincere apologies for delay in getting back to this thread.

Thanks for bringing this issue to our attention. I have reached to our PG to further review the script and incorporate the feedback from this thread as a backlog item.

Currently as we don't see any direct edits or updates to the document, other than the script changes needed. We will go ahead and close this issue for now and tag this thread for any changes on the doc, however if you have any further feedback on the document please tag us in your reply and will be happy to reopen the thread and continue the conversation. Thank you

@chilicrepe
Copy link

Unfortunately the script is still not working with RBAC ...

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

5 participants