api-management-key-vault-access.md

author	ms.service	ms.topic	ms.date	ms.author
dlepow	azure-api-management	include	01/11/2023	danlep

Configure access to key vault

1. In the portal, navigate to your key vault.
2. In the left menu, select Access configuration, and note the Permission model that is configured.
3. Depending on the permission model, configure either a key vault access policy or Azure RBAC access for an API Management managed identity.

To add a key vault access policy:

1. In the left menu, select Access policies.
2. On the Access policies page, select + Create.
3. On the Permissions tab, under Secret permissions, select Get and List, then select Next.
4. On the Principal tab, Select principal, search for the resource name of your managed identity, and then select Next. If you're using a system-assigned identity, the principal is the name of your API Management instance.
5. Select Next again. On the Review + create tab, select Create.