Good afternoon, I'm trying to assign a system managed identity access to keyvault (using azure native) but for the life of me I can't seem to find how to do this. I've seen a sample on how to do this using azure classic, but that doesn't appear to work in azure native. Am I just overlooking something? Thanks for any help 🙂

If you doing RBAC than you make a role assignment. https://www.pulumi.com/registry/packages/azure-native/api-docs/authorization/roleassignment/ If you doing access policy then it set on the key vault. https://www.pulumi.com/registry/packages/azure-native/api-docs/keyvault/vault/

Thanks for your reply nahlian. Problem with doing this on the keyvault is that I created the keyvault in a different stack.

I use access policies all the time for my app service / function app communication to key vault. I export the managed identity from the service and configure the access policy on the key vault. In the key vault article I linked, the object ID under access policy is the managed identity ID.