SIMULATION You need to ensure that User2-11641655 has all the key permissions for KeyVault11641655. To complete this task, sign in to the Azure portal and modify the Azure resources. Answer: You…

Submitted by amina.ke· Mar 6, 2026Manage identity and access in Azure - specifically configuring role-based access control (RBAC) for Azure Key Vault resources to grant appropriate secret management permissions to users.

Question

SIMULATION You need to ensure that User2-11641655 has all the key permissions for KeyVault11641655. To complete this task, sign in to the Azure portal and modify the Azure resources. Answer: You need to assign the user the Key Vault Secrets Officer role. 1. In the Azure portal, type Key Vaults in the search box, select Key Vaults from the search results then select KeyVault11641655. Alternatively, browse to Key Vaults in the left navigation pane. 2. In the key vault properties, select Access control (IAM). 3. In the Add a role assignment section, click the Add button. 4. In the Role box, select the Key Vault Secrets Officer role from the drop-down list. 5. In the Select box, start typing User2-11641655 and select User2-11641655 from the search results. 6. Click the Save button to save the changes.

Explanation

The Key Vault Secrets Officer role is the correct choice because it grants full permissions over Key Vault secrets, including get, list, set, delete, backup, restore, and recover operations, which satisfies the requirement of 'all key permissions.' This is assigned through Access Control (IAM) using Azure RBAC, which is the modern and recommended approach for managing Key Vault access. Navigating to the specific Key Vault and using the IAM blade ensures the role is scoped correctly to KeyVault11641655 rather than applied at a broader subscription or resource group level.

Topics

#Azure Key Vault#Azure RBAC#Identity and Access Management#Least Privilege Principle

Community Discussion

No community discussion yet for this question.

Full AZ-500 Practice