When will App Gateway fully support RBAC Key Vault security model?

Question

Looking at this document: https://learn.microsoft.com/en-gb/azure/application-gateway/key-vault-certs

In "How Integration Works", it states: "Azure Application Gateway integration with Key Vault supports both Vault access policy and Azure role-based access control permission models."

But then, further down, in "Configure Application Gateway Listener", I see: "Specifying Azure Key Vault certificates that are subject to the role-based access control permission model is not supported via the portal."

This seems contradictory - I am using the RBAC model as recommended by Microsoft, yet the Portal does not support renewing my App Gateway cert.

When will the Portal be changed to support the recommended KY permission model?

Answer 1

Hi @Robinson, Andrew

Thank you for reaching Microsoft Q&A.

Due to certain limitations, specifying Azure Key Vault certificates that are subject to the role-based access control permission model is not supported via the azure portal. which means that if you are using the RBAC model, you will need to use Azure PowerShell, CLI, ARM templates, or Bicep to reference the Key Vault certificate.

Regarding your question about when the Portal will be changed to support the recommended KY permission model, there hasn’t been an official announcement from Microsoft regarding a specific timeline. It might be helpful to keep an eye on the Azure updates page or you could share the feedback on this https://feedback.azure.com/d365community/ which is closely monitored by our product team.

Hope this helps. Do let us know if you any further queries by responding in the comments section.

Thanks,

Akhilesh.

---

If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.