Set permission for the BYOK service by configuring each Azure Key Vault

For each KeyControl managed Key Vault:

1. Navigate to Azure > Key vaults > <Key Vault name> > Access policies.
2. Use Add Access Policy to add permissions to the BYOK application.
3. In Key Permissions. select All Key Management Operations and Privileged Key Operations.
4. Select Principal > BYOK application.
5. Select Add.