Azure Keyvault - "Operation "list" is not allowed by vault policy" but all permissions are checked

c# .net powershell azure azure-keyvault
Pikapops picture Pikapops · Mar 20, 2017 · Viewed 24.3k times · Source

I am accessing KeyVault with .NET client with an AAD application. Although all permissions under secrets are enabled for this AAD app (screenshot below) I am getting "The operation "List" is not enabled in this key vault's access policy" if I navigate to the Secret panel.

I would like to be able to set the permissions via the AAD application and so using Powershell wouldn't be an option.

If I set the permissions via Powershell - it does work.

How I'm creating my access policies:

        var accessPolicy = new AccessPolicyEntry
        {

            ApplicationId = app,
            ObjectId = Obid,
            PermissionsRawJsonString = "{ \"keys\": [ \"all\" ], \"secrets\": [ \"all\"  ], \"certificates\": [ \"all\" ] }",
            TenantId = ten,

        };

        return accessPolicy;

which gives me enter image description here

Then the list error appears and so I have to use

Set-AzureRmKeyVaultAccessPolicy -VaultName vaultname -ResourceGroupName location -ObjectId obid -PermissionsToKeys all -PermissionsToSecrets all

That will get rid of the error but I would much prefer a solution so I can work with the .NET SDK to resolve.

Answer

Horia Toma picture Horia Toma · Nov 27, 2017

I had the same issue and the solution was to get to my vault's Access Policies blade, then click on my application and activate List on Key permissions / Secret permissions

Related questions

Post build event execute PowerShell

Is it possible to set up a .NET project with a post build event to execute a powershell script? I am using this script to generate some files. Also can I pass whether it's a debug or release build to …

Read More
Could not find default endpoint element that references contract :connect to WCF endpoint through Powershell cmdlet

I have created a class library that should connect to a WCF endpoint project I am hosting. The client project has commandlets defined that should interact with the service. However, I keep getting the following error: Could not find default …

Read More
How to convert Powershell to C#

Is possible to convert PowerShell code .PS1 to C# code? I'v been looking to it on google but I always find the contrary. Reflector has the AddIn to convert DLL to PS Code, so I think it's possible..

Read More