RBAC role that can do anything with keys (keys/*), apart from managing permissions.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains Key Vault Crypto Officer in context, with comparison tables and the common traps.
Terms in this definition
- RBAC
Short for role-based access control: Azure role assignments, inherited downward through scopes, that decide who may perform which actions on resources. Resource location and size are outside its control.
- Role
How an actor normally or expectedly behaves, or the part a person takes in a process. A single actor may hold more than one role.
- AGDLP
Nesting pattern: users go into global groups, which go into domain local groups, which receive the permissions. AGUDLP adds universal groups for forests with several domains.