---
title: "Discussion on \"Azure Key Vault Access Policy vs RBAC\" | Hashnode"
description: "Discussion on \"Azure Key Vault Access Policy vs RBAC\". Applying the RBAC permission model to protect 🔐 your Azure Key Vault objects should be used in favor of the access policy option.\nThe vault access policy is applied at the Key Vault scope. Meaning if"
url: "https://hashnode.com/posts/azure-key-vault-access-policy-vs-rbac/63dfc98bd5b9947d4191f56c"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [Azure Key Vault Access Policy vs RBAC](https://blog.jennasrunbooks.com/azure-key-vault-access-policy-vs-rbac?utm_source=hashnode&utm_medium=feed)

Applying the RBAC permission model to protect 🔐 your Azure Key Vault objects should be used in favor of the access policy option. The vault access policy is applied at the Key Vault scope. Meaning if

Feb 5, 2023 · 2 min read · blog.jennasrunbooks.com  
Updated Sep 4  
Read the article

-   [#azure](https://hashnode.com/tag/azure)
-   [#cloud](https://hashnode.com/tag/cloud)
-   [#cloud-computing](https://hashnode.com/tag/cloud-computing)
-   [#cloud-security](https://hashnode.com/tag/cloud-security)

## Written by

[Jenna's Runbooks](https://hashnode.com/@jennasrunbooks)

@jennasrunbooks

  
[View profile](https://hashnode.com/@jennasrunbooks)

Cloud Engineer & SRE transitioning to AI/ML Platform Engineering | Writing on AI Infra, MLOps & DevEx

Hi there! I'm a Cloud Engineer & SRE, documenting my transition into AI/ML Platform Engineering. I write technical deep-dives, hands-on implementation guides, CLI helper scripts, and visual architectures covering cloud, infrastructure, orchestration, governance, and modern AI runtimes.

## Responses 1

Markdown supported · ⌘↵ to post

[Jake Mannion](https://hashnode.com/@hamsandwich)

[Feb 7, 2023](https://hashnode.com/posts/azure-key-vault-access-policy-vs-rbac/63dfc98bd5b9947d4191f56c/comment/63e285bdcecce1c954ae0036)

Thanks for this - never really thought about the difference between the methods. Just sort of "winged" it.

Granularity is (almost always) a good thing! RBAC it is!

[Jenna's Runbooks](https://hashnode.com/@jennasrunbooks)

[Feb 8, 2023](https://hashnode.com/posts/azure-key-vault-access-policy-vs-rbac/63dfc98bd5b9947d4191f56c/comment/63e285bdcecce1c954ae0036#reply-63e2f961b4cec7d3e8927224)

Thank you Jake, glad you liked it! And I absolutely agree with you - RBAC all day every day :)