Azure Managed HSM – AccessDenied when creating a Role Assignment
When creating a Role Assignment at the scope of an Azure Managed HSM key, I received an AccessDenied. But, even with the error, the permission was created.
Sharing knowledge since 2016.
I'm Vinicius Deschamps, a Platform Engineer, DevOps Engineer, Microsoft MVP, and founder of Azure User Groups Brazil. I share practical experiences about Azure, DevOps, cloud platforms, security, identity, and the lessons learned from building real-world solutions.
Recent publications
When creating a Role Assignment at the scope of an Azure Managed HSM key, I received an AccessDenied. But, even with the error, the permission was created.
With Azure Managed Identity it is possible to eliminate the need for developers to manage passwords and credentials, keeping communication secure between services. If you still don’t know what Azure…
Password and credential management has always been a challenge for developers, especially for service-to-service communication. Although it is possible to use Azure Key Vault to securely store such information, services need a way to access it.
As you may have seen in my article about what Dev Box is, Dev Box is a pre-configured computer created through a self-service portal, which provides autonomy to your team of developers and accelerates integration to projects…
I've discussed Azure Bastion in other posts here on the blog (here and here), and, for those who don't know, it's a Platform as a Service that provides secure RDP and SSH connectivity to protect your…
Have you ever thought it would be possible to access a portal where you could create a machine in Azure, accessible from anywhere in the world and from any device? This is already possible with Azure Dev Box What is…
Microsoft Build //localhost:florianópolis
Organizer and speaker alongside Rafael Ferreira at a local Microsoft Build event covering the main Build 2026 announcements and the development of AI solutions on Azure.
Global Azure Floripa 2026
A practical session on Hardware Security Modules, the difference between traditional vaults and hardware protection, Azure use cases, and architecture, governance, and operational considerations.
1st ADS Academic Week — IFSC São José
A conversation with Rafael Ferreira about the reality of international technology work, its challenges, and opportunities for Brazilian professionals.