Skip to content

Commit 653328c

Browse files
Merge pull request #212126 from jlichwa/patch-27
Update rbac-guide.md
2 parents 56bff00 + cca1699 commit 653328c

File tree

1 file changed

+3
-1
lines changed

1 file changed

+3
-1
lines changed

articles/key-vault/general/rbac-guide.md

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -36,7 +36,6 @@ Individual keys, secrets, and certificates permissions should be used
3636
only for specific scenarios:
3737

3838
- Sharing individual secrets between multiple applications, e.g., one application needs to access data from the other application
39-
- Cross-tenant encryption with customer key, e.g., ISV using a key from a customer key vault to encrypt its data
4039

4140
More about Azure Key Vault management guidelines, see:
4241

@@ -199,6 +198,9 @@ For full details, see [Assign Azure roles using Azure PowerShell](../../role-bas
199198

200199
### Secret scope role assignment
201200

201+
> [!NOTE]
202+
> Key vault secret, certificate, key scope role assignments should only be used for limited scenarios described [here](rbac-guide.md?i#best-practices-for-individual-keys-secrets-and-certificates-role-assignments) to comply with security best practices.
203+
202204
1. Open a previously created secret.
203205

204206
1. Click the Access control(IAM) tab

0 commit comments

Comments
 (0)