azure-keyvault-administration

import os from azure.identity import DefaultAzureCredential from azure.keyvault.administration import KeyVaultAccessControlClient # Set these environment variables or ensure DefaultAzureCredential can find them # For local development, 'az login' is often sufficient. # KEY_VAULT_MANAGED_HSM_URL should be in the format: "https://<your-hsm-name>.managedhsm.azure.net" hsm_url = os.environ.get("KEY_VAULT_MANAGED_HSM_URL", "<your-hsm-url>") if hsm_url == "<your-hsm-url>": raise ValueError("Please set the KEY_VAULT_MANAGED_HSM_URL environment variable.") try: # Authenticate using DefaultAzureCredential credential = DefaultAzureCredential() # Create a KeyVaultAccessControlClient access_control_client = KeyVaultAccessControlClient(vault_url=hsm_url, credential=credential) print(f"Listing role definitions for {hsm_url}...") role_definitions = access_control_client.list_role_definitions() for role_def in role_definitions: print(f" Role Name: {role_def.role_name}, ID: {role_def.id}") print("Successfully listed role definitions.") except Exception as e: print(f"An error occurred: {e}") print("Ensure that your environment is authenticated (e.g., via 'az login') ") print("and the service principal/user has 'Managed HSM Administrator' or equivalent RBAC role on the HSM.")