Share via

Now able to add Certificates from AKV in APIM

Pothiraj, Saranya-ADM 0 Reputation points
2024-02-29T22:22:23.13+00:00

Hi Team, IM trying to add the certificates from AKV to APIM, But im getting authorization issue . Here are the roles assigned in AKV for APIM . User's image

User's image

Here it mentions that my user account(client) doesn't have permission. Please let me know hat permission are needed for my account Also why it need my account permission, even though i try from APIM.User's image

Azure Key Vault
Azure Key Vault
An Azure service that is used to manage and protect cryptographic keys and other secrets used by cloud apps and services.
1,343 questions
Azure API Management
Azure API Management
An Azure service that provides a hybrid, multi-cloud management platform for APIs.
2,239 questions
0 comments

3 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Luis Arias 7,766 Reputation points
    2024-03-01T09:46:36.3666667+00:00

    Hi Pothiraj, Saranya-ADM,

    Based on your image, you are granting the permission by RBAC on azure. However from APIM you need to have the permission to list , so you can start checking the Access settings:

    User's image

    If It's setup on "vault access policy" you need to add the get and list permission on access policy option (Here rbac role it doesn't matter). On the other hand if you already have enable "Azure role-based access control" you can go to Access Control (AIM ) and click on check access for your service principal :

    User's image

    Finally if you don't have the proper access to KV you need to require to the Key vault administrator grant the permission because as per your image you don't have the permission to do it. The rbac role Key Vault Certificates user is enough to get and list the certificates.: https://zcusa.951200.xyz/en-us/azure/key-vault/general/rbac-guide?tabs=azure-cliUser's image

    Let me know if this help you or if you have any additional doubt.

    Regards, Luis

    If the information helped address your question, please Accept the answer.

  2. Pothiraj, Saranya-ADM 0 Reputation points
    2024-03-04T21:34:44.87+00:00

    Hi Team, I have verified i have all the access but still getting same issue. Please help on this

    0 comments
  3. Krzysztof Świdrak 166 Reputation points
    2024-12-18T20:13:10.91+00:00

    Same issue here - can someone please explain which permissions to certificate in KV is required for:
    a) APIM managed identity
    b) user that setup this?

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.