azure-docs icon indicating copy to clipboard operation
azure-docs copied to clipboard

Backup encrypted Az VMs does not explain permissions for RBAC enabled key vaults

Open fluffy-cakes opened this issue 3 years ago • 3 comments

This page does not explain the correct permissions required on RBAC enabled key vaults, and I am prompted with this error when trying to enable.

{
    "status": "Failed",
    "error": {
        "code": "UserErrorKeyVaultPermissionsNotConfigured",
        "message": "Azure Backup Service does not have sufficient permissions to Key Vault for Backup of Encrypted Virtual Machines."
    }
}

image


Document Details

Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

fluffy-cakes avatar Aug 23 '22 11:08 fluffy-cakes

@fluffy-cakes Thank you for your post. The permissions are documented here - https://docs.microsoft.com/en-us/azure/backup/backup-azure-vms-encryption#provide-permissions

image

SadiqhAhmed-MSFT avatar Aug 23 '22 13:08 SadiqhAhmed-MSFT

@SadiqhAhmed-MSFT , sorry the page only explains permissions via Access Policies.

This does not explain the correct permissions for Role Base Access Control: https://docs.microsoft.com/en-us/azure/key-vault/general/rbac-guide?tabs=azure-cli

fluffy-cakes avatar Aug 23 '22 13:08 fluffy-cakes

@fluffy-cakes - sorry for the long delay in getting back. We have updated the document in PR #221293, the updates will be live soon. Tganks!

#please-close

AbhishekMallick-MS avatar Dec 13 '22 16:12 AbhishekMallick-MS

#please-close

AbhishekMallick-MS avatar Dec 21 '22 06:12 AbhishekMallick-MS

This has still not been updated.

iansmittie avatar Dec 01 '23 17:12 iansmittie