Azure / Azure/azure-cli

az keyvault secret show doesn't work with Key Vault Secrets User role

Open
#25,177 1 comment 0 reactions 1 assignee Claimed by @evelyn-ys View on GitHub
act-identity-squad Auto-Assign Azure CLI Team customer-reported feature-request KeyVault
Dominant language
Python
Stars
4.6k
Forks
3.5k
Avg merge
3d 2h
Merged PRs (30d)
60

Description

> ### `az feedback` auto-generates most of the information requested below, as of CLI version 2.0.62

**Related command**
az keyvault secret show

**Describe the bug**
It seems that the command always try to search for an access policy even if the keyvault is configured to use RBAC.

**To Reproduce**
Create a service principal
Create a keyvault using the RBAC mode (not the access policies)
Give the SP the Key Vault Secret User role
Create a secret
login with az cli using your SP
try to get the keyvaukt secret value with az cli

**Expected behavior**
The documentation should specify that only access policies are supported or the command should return the secret value.

**Environment summary**
Our tests was done on an azure devops agent in an AzureCli task. The service principal was configured using an Azure Devops Service Connection used by the AzureCli task.

**Additional context**

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.