Deployment Script Error: Set-AzKeyVaultSecret

[samuel990705]

Having an error with the 2 lines of Set-AzKeyVaultSecret on lines 547 and 548 regarding KeyVaults:

• "Set-AzKeyVaultSecret -VaultName $KeyVaultName -Name 'appid' -SecretValue (ConvertTo-SecureString -String $global:appId -AsPlainText -Force) | Out-Null"
• "Set-AzKeyVaultSecret -VaultName $KeyVaultName -Name 'appsecret' -SecretValue (ConvertTo-SecureString -String $global:appSecret -AsPlainText -Force) | Out-Null"

The same error is thrown:
"Set-AzKeyVaultSecret : Operation returned an invalid status code 'Forbidden'"

Note the 2 warnings prior to the errors. There were no errors prior to this.

Thank you!

[samuel990705]

Hi @alexc-MSFT , any updates on the issue?

[alexc-MSFT]

@samuel990705 this is odd - i've not seen this before. What permissions do you have on the azure subscription just out of interest?

[samuel990705]

@alexc-MSFT If I'm not mistaken, I am a global administrator. I have been able to run these lines without errors before, I'm unsure why they are being thrown now. I have tried deleting the key vault and rerun, as well as just creating an entirely new key vault (with a different name).

[samuel990705]

@alexc-MSFT It seems like this is the only issue I am having. The script runs to completion afterwards. I can see that the Key Vault is still being created. Could I manually add the keyvault secret? Was the " Set-AzKeyVaultAccessPolicy" meant to come before?

It seems to have something to do with my permissions for the keyvault.

Although I am listed as an owner of the keyvault

Also, does it matter that my Azure AD tenant ID is different from my Teams' tenant ID? I have run into problems with other custom apps on teams for this reason before.