kv-cert
Installation
SKILL.md
Azure Key Vault Certificate Management
Manage SSL certificates in Azure Key Vault and bind them to App Service custom domains.
RBAC Permissions
KV uses RBAC authorization. Key roles:
| Role | Purpose | Role Definition ID |
|---|---|---|
| Key Vault Certificate User | Read certs | db79e9a7-68ee-4b58-9aeb-b90e7c24fcba |
| Key Vault Certificates Officer | Create/import/delete certs | a4417e6f-fecd-4de8-b567-7b0420556985 |
| Key Vault Secrets User | Read secrets (cert private keys are stored as secrets) | 4633458b-17de-408a-b874-0445c86b69e6 |
Grant RBAC via REST API
az role assignment create may fail with MissingSubscription in some CLI versions. Use REST API instead: