Azure / Azure/azure-rest-api-specs

KeyVault RBAC RoleDefinitionProperties `assignableScopes` not working as expected

Open
#23,045 1 comment 0 reactions 0 assignees View on GitHub
KeyVault Service Attention
Dominant language
TypeSpec
Stars
3.1k
Forks
5.9k
Avg merge
2d 22h
Merged PRs (30d)
444

Description

when i create a RoleDefinition for a ManagedHSM for assignableScopes field as described here:

https://github.com/Azure/azure-rest-api-specs/blob/9e17eb2d475e8908277d929b0e4a4c582e2ba752/specification/keyvault/data-plane/Microsoft.KeyVault/stable/7.4/rbac.json#L624-L629

if i pass a `/keys` to Create Method, the response of this field changed to `/`. Is this a by-design or this property does not support the vaule of `/keys`?

Request:

![image](https://user-images.githubusercontent.com/2633022/224720254-428d9d93-c8d6-4712-8dd4-2412fdbc72f2.png)

Response:

![image](https://user-images.githubusercontent.com/2633022/224720328-01fd5eaf-e182-48c0-b5c4-5233e67f0dd2.png)

**Enum** defined the `/keys` value:
https://github.com/Azure/azure-rest-api-specs/blob/9e17eb2d475e8908277d929b0e4a4c582e2ba752/specification/keyvault/data-plane/Microsoft.KeyVault/stable/7.4/rbac.json#L682-L689

Contributor guide

Open the contributing guide

Research direction

Start by reading specification/keyvault/data-plane/Microsoft.KeyVault/stable/7.4/rbac.json, especially the assignableScopes definition at lines 624-629 and its enum at lines 682-689. Compare the documented /keys value with the reported request and response, then determine whether the behavior is expected or whether the specification needs correction.

Written by the indexing model from the issue text.

Assessment

Tech stack
azure, json
Domain
api, authorization, cloud, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.