Once switched on, this Key Vault option cannot be turned off; it prevents the vault or its objects being permanently deleted until the soft-delete retention period has elapsed, and needs soft delete enabled.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains Purge protection in context, with comparison tables and the common traps.
Terms in this definition
- Access policies
Older permission model for Key Vault, now superseded by the Azure RBAC model.
- Soft delete
Retains deleted backups or data so they can be recovered during a retention period.