How to grant access to secrets in an Azure Key Vault

Why

  • You are using Azure Key Vault to store a secret such as a password or API key and you need to give another team member access to the secret.

Instructions

  1. Go to your key vault on Azure

    From the top search bar, you can search for your vault by name, or search for “key vaults” and navigate to your vault. 

  2. Click Access Control (IAM) on the left menu

  3. Click +Add and then Add Role Assignment from the menu

  4. Click role you want to assign to the user (typically Key Vault Secrets User)

    To view secrets (read-only), click Key Vault Secrets User. To create secrets, you need Key Vault Secrets Officer. For a typical team, you could give the team lead the officer role, and the team members the user role. Otherwise review the roles carefully to determine which role is suitable for your scenario.

  5. Click Next

  6. Click + Select members

    A popup window will appear for you to select one or more people to receive the role.

  7. In the popup, select a person and click Select

  8. Optionally write a description

    A description of why you are assigning this role can be helpful for auditing purposes.

  9. Click Review + assign

  10. Review and click Review + assign again

See also

Leave a Reply