Role Information
Details and metadata
db79e9a7-68ee-4b58-9aeb-b90e7c24fcba
Change History
Track all modifications to this role since 2025-12-15 01:08:16+00:00
Updated On
Event Type
Summary & Details
2024-01-12 16:49:52
Created
Show full JSON diff
+ {
+ "properties": {
+ "roleName": "Key Vault Certificate User",
+ "type": "BuiltInRole",
+ "description": "Read certificate contents. Only works for key vaults that use the 'Azure role-based access control' permission model.",
+ "assignableScopes": [
+ "/"
+ ],
+ "permissions": [
+ {
+ "actions": [],
+ "notActions": [],
+ "dataActions": [
+ "Microsoft.KeyVault/vaults/certificates/read",
+ "Microsoft.KeyVault/vaults/secrets/getSecret/action",
+ "Microsoft.KeyVault/vaults/secrets/readMetadata/action",
+ "Microsoft.KeyVault/vaults/keys/read"
+ ],
+ "notDataActions": []
+ }
+ ],
+ "createdOn": "2024-01-12T16:49:52.175Z",
+ "updatedOn": "2024-01-12T16:49:52.175Z",
+ "createdBy": null,
+ "updatedBy": null
+ },
+ "id": "/providers/Microsoft.Authorization/roleDefinitions/db79e9a7-68ee-4b58-9aeb-b90e7c24fcba",
+ "type": "Microsoft.Authorization/roleDefinitions",
+ "name": "db79e9a7-68ee-4b58-9aeb-b90e7c24fcba"
+ }
2024-01-12 16:49:52
Created
View details
+ {
+ "properties": {
+ "roleName": "Key Vault Certificate User",
+ "type": "BuiltInRole",
+ "description": "Read certificate contents. Only works for key vaults that use the 'Azure role-based access control' permission model.",
+ "assignableScopes": [
+ "/"
+ ],
+ "permissions": [
+ {
+ "actions": [],
+ "notActions": [],
+ "dataActions": [
+ "Microsoft.KeyVault/vaults/certificates/read",
+ "Microsoft.KeyVault/vaults/secrets/getSecret/action",
+ "Microsoft.KeyVault/vaults/secrets/readMetadata/action",
+ "Microsoft.KeyVault/vaults/keys/read"
+ ],
+ "notDataActions": []
+ }
+ ],
+ "createdOn": "2024-01-12T16:49:52.175Z",
+ "updatedOn": "2024-01-12T16:49:52.175Z",
+ "createdBy": null,
+ "updatedBy": null
+ },
+ "id": "/providers/Microsoft.Authorization/roleDefinitions/db79e9a7-68ee-4b58-9aeb-b90e7c24fcba",
+ "type": "Microsoft.Authorization/roleDefinitions",
+ "name": "db79e9a7-68ee-4b58-9aeb-b90e7c24fcba"
+ }
Latest Role JSON
Raw definition from Azure
{
"properties": {
"roleName": "Key Vault Certificate User",
"type": "BuiltInRole",
"description": "Read certificate contents. Only works for key vaults that use the 'Azure role-based access control' permission model.",
"assignableScopes": [
"/"
],
"permissions": [
{
"actions": [],
"notActions": [],
"dataActions": [
"Microsoft.KeyVault/vaults/certificates/read",
"Microsoft.KeyVault/vaults/secrets/getSecret/action",
"Microsoft.KeyVault/vaults/secrets/readMetadata/action",
"Microsoft.KeyVault/vaults/keys/read"
],
"notDataActions": []
}
],
"createdOn": "2024-01-12T16:49:52.175Z",
"updatedOn": "2024-01-12T16:49:52.175Z",
"createdBy": null,
"updatedBy": null
},
"id": "/providers/Microsoft.Authorization/roleDefinitions/db79e9a7-68ee-4b58-9aeb-b90e7c24fcba",
"type": "Microsoft.Authorization/roleDefinitions",
"name": "db79e9a7-68ee-4b58-9aeb-b90e7c24fcba"
}