Set permission for the BYOK service by configuring each Azure Key Vault

For each KeyControl managed Key Vault:

  1. Navigate to Azure > Key vaults > <Key Vault name> > Access policies.
  2. Use Add Access Policy to add permissions to the BYOK application.
  3. In Key Permissions. select All Key Management Operations and Privileged Key Operations.
  4. Select Principal > BYOK application.
  5. Select Add.