[Doc]: `Get-AzKeyVaultCertificateContact` - What is least privilege permission in both RBAC and access policy?

### Type of issue

Other (describe below)

### Feedback

What's the least privilege permissions for Key Vault to do `Get-AzKeyVaultCertificateContact`, both for access policies and RBAC? Is RBAC even supported?

* Cmdlet:
* API endpoint:

When request to an RBAC enabled Key Vault fails, the error says action `Microsoft.KeyVault/vaults/certificatecontacts/write` is required. This seems overkill. But seems to be the only relevant action available:

*

For access policy based Key Vaults, it seems to be `managecontacts`, which also is a write permissions?

*
*

### Page URL

_No response_

### Content source URL

_No response_

### Author

_No response_

### Document Id

_No response_

### Platform Id

_No response_