I am trying to add an App Service Certificate to a Key Vault

Question

I am trying to add an App Service Certificate to a Key Vault

Simon Radford 20

I am trying to add an App Service Certificate that I created to a Key Vault that I created by keep getting this error

User's image

How can I give myself permission to do this, I am the Owner of the subscription.

Simon Radford 20 Reputation points

2025-12-18T15:00:35.9566667+00:00

Perfect, Thank you, I was unable to get it to work using RBAC but I switched to Vault access policy and set the permissions and it's worked perfectly!
Shubham Sharma 17,790 Reputation points Microsoft External Staff Moderator

2025-12-18T15:05:41.3333333+00:00

Simon Radford

You're welcome

If the resolution was helpful to resolve your query, please accept the answer and upvote it 👍 to make it helpful for the community.

Thank you for helping to improve Microsoft Q&A!

4 answers

Your answer

Simon Radford 20 Reputation points

2025-12-18T15:00:35.9566667+00:00

Perfect, Thank you, I was unable to get it to work using RBAC but I switched to Vault access policy and set the permissions and it's worked perfectly!
Shubham Sharma 17,790 Reputation points Microsoft External Staff Moderator

2025-12-18T15:05:41.3333333+00:00

Simon Radford

You're welcome

If the resolution was helpful to resolve your query, please accept the answer and upvote it 👍 to make it helpful for the community.

Thank you for helping to improve Microsoft Q&A!

Answer 1

hi folks,

so I have the same question, but reading your advice doesn't help me really.

I created the Key Vault, use RBAC, created a certificate successfully under

Microsoft.Web-AppServiceCertificates-Portal-0123456789

I am the owner of the Vault and certificate.

I assigned the user myself the role

Key Vault Administrator
Key Vault Secrets Officer

The Domain Access Verification by godaddy was successful "Domain Access Approval Completed".

The topic "3. Assign required roles to App Service Certificate service principals"

causes me headache. Don't know where or what to find. Maybe the GUI has changed as often at Microsoft (Azure).

It' a pain to read some old articles while "Microsoft Azure Trusted Signing" was meanwhile renamed to "Artifact Signing".

Many old Howto's don't really help.

Finally the popup "Save Key Vault Settings" (exactly like the one above) with the error

Failed to link certificate with the selected Key Vault

... Caller is not authorized to perform action on resource.

always rises. Even Copilot does not help, so I try it here

Meanwhile "App Service Certificates" shows my certificate with Status "Denied",

when starting some days before the status was "Pendingissuance"

So, I created a new certificate and get the same Popup error. Godaddy says success.

I'm totally stuck...

Answer 2

Deleted

This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

Comments have been turned off. Learn more

Answer 3

Simon Radford 20

The answer has been removed but I had already tried what that suggested.

0 comments

Answer 4

Deleted

This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

Comments have been turned off. Learn more