You have an Azure subscription that contains a user named User1 and an Azure key vault named Vault1. You need to ensure that User1 can read the metadata of certificates, keys, and secrets stored in…

The correct answer is C. Key Vault Reader. The Key Vault Reader role is the minimum user role required to read the metadata of certificates, keys, and secrets stored in an Azure Key Vault. This role allows users to view the properties and attributes of these objects, but not to access their actual contents…

Submitted by devops_kid· Mar 6, 2026Implement authentication and access management solution

Question

You have an Azure subscription that contains a user named User1 and an Azure key vault named Vault1. You need to ensure that User1 can read the metadata of certificates, keys, and secrets stored in Vault1. The solution must follow the principle of least privilege. Which role should you assign to User1?

Options

AKey Vault Secrets User
BKey Vault Crypto User
CKey Vault Reader
DKey Vault Crypto Officer

How the community answered

(27 responses)

A
4% (1)
B
4% (1)
C
81% (22)
D
11% (3)

Explanation

The Key Vault Reader role is the minimum user role required to read the metadata of certificates, keys, and secrets stored in an Azure Key Vault. This role allows users to view the properties and attributes of these objects, but not to access their actual contents. https://learn.microsoft.com/en-us/azure/key-vault/general/rbac-guide

Topics

#Key Vault Reader#least privilege#certificate metadata#Key Vault RBAC

Community Discussion

No community discussion yet for this question.

Full SC-300 Practice