Skip to content

Commit edfe5b4

Browse files
authored
Update Set-AzKeyVaultAccessPolicy.md (Azure#12629)
Added note saying -BypassObjectIdValidation parameter is required when using Service Principals, as is a product limitation. Source: Azure#10029 (comment)
1 parent bba45a8 commit edfe5b4

File tree

1 file changed

+3
-0
lines changed

1 file changed

+3
-0
lines changed

src/KeyVault/KeyVault/help/Set-AzKeyVaultAccessPolicy.md

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -142,6 +142,9 @@ If you register an application in a directory other than the default directory,
142142
The application must be in the default directory.
143143
Note that although specifying the resource group is optional for this cmdlet, you should do so for better performance.
144144

145+
> [!NOTE]
146+
> When using a service principal to grant access policy permissions, you must use the `-BypassObjectIdValidation` parameter.
147+
145148
## EXAMPLES
146149

147150
### Example 1: Grant permissions to a user for a key vault and modify the permissions

0 commit comments

Comments
 (0)