# azcollection.azure\_rm\_keyvault  with RBAC

**URL:** <https://forum.ansible.com/t/azcollection-azure-rm-keyvault-with-rbac/35947>\
**Category:** Ansible Project\
**Tags:** azure\
**Created:** [November 2, 2021, 9:30am UTC](https://forum.ansible.com/t/azcollection-azure-rm-keyvault-with-rbac/35947 "2021-11-02T09:30:03Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Gajendra\_Gaikwad1](https://avatars.discourse-cdn.com/v4/letter/g/9de053/32.png) [@Gajendra\_Gaikwad1](https://forum.ansible.com/u/Gajendra_Gaikwad1)\
**Post date:** [November 2, 2021, 9:30am UTC](https://forum.ansible.com/t/azcollection-azure-rm-keyvault-with-rbac/35947/1 "2021-11-02T09:30:03Z")

</div>

Hello Team,

I want to create Azure keyvault using azcollection.azure\_rm\_keyvault module and in this case I would like to enable the **Azure role-based access control** in permission module.  
By default is taking Vault access policy.

Can anyone help me to achieve this ?

Permission model

- Vault access policy

- **Azure role-based access control**

---

<div class="post-metadata">

**Author:** ![Gajendra\_Gaikwad1](https://avatars.discourse-cdn.com/v4/letter/g/9de053/32.png) [@Gajendra\_Gaikwad1](https://forum.ansible.com/u/Gajendra_Gaikwad1)\
**Post date:** [November 2, 2021, 9:44am UTC](https://forum.ansible.com/t/azcollection-azure-rm-keyvault-with-rbac/35947/2 "2021-11-02T09:44:20Z")

</div>

Hi,

Same can be achieve with az command line but i need in ansible

# az keyvault create --location eastus2 --name “adfaljdfk44” --resource-group dev-sanbox-Keyvaults-eus --enable-rbac-authorization true

Regards,  
GG

---

<div class="post-metadata">

**Author:** ![Gajendra\_Gaikwad1](https://avatars.discourse-cdn.com/v4/letter/g/9de053/32.png) [@Gajendra\_Gaikwad1](https://forum.ansible.com/u/Gajendra_Gaikwad1)\
**Post date:** [November 2, 2021, 10:55am UTC](https://forum.ansible.com/t/azcollection-azure-rm-keyvault-with-rbac/35947/3 "2021-11-02T10:55:19Z")

</div>

Without access polices i am getting below error.

failed: [localhost → localhost] (item=dev) =\> {“ansible\_loop\_var”: “item”, “changed”: false, “item”: “dev”, “msg”: “Error creating the Key Vault instance: Azure Error: BadRequest\nMessage: The parameter accessPolicies is not specified.”}