keyvault-object-scope-rbac-read-only

Status: IN

Object-scope RBAC assignments in Key Vault only support read operations; administrative operations require vault-level permissions.

Source: entries/2026/03/11/keyvault-best-practices.md

JSON