IAM Role: Azure/Key Vault/admin

Permission	Grant
microsoft.keyvault/hsmpools/delete	admin
microsoft.keyvault/hsmpools/write	admin
microsoft.keyvault/locations/deletevirtualnetworkorsubnets/action	admin
microsoft.keyvault/vaults/accesspolicies/write	admin
microsoft.keyvault/vaults/write	admin
microsoft.keyvault/vaults/delete	admin
microsoft.keyvault/vaults/eventgridfilters/delete	admin
microsoft.keyvault/vaults/eventgridfilters/write	admin
microsoft.keyvault/vaults/providers/microsoft.insights/diagnosticsettings/write	admin
microsoft.keyvault/vaults/secrets/write	admin
microsoft.resources/deployments/cancel/action	admin
microsoft.resources/deployments/delete	admin
microsoft.resources/deployments/validate/action	admin
microsoft.resources/deployments/write	admin
microsoft.keyvault/hsmpools/joinvault/action	operator
microsoft.keyvault/locations/deletedvaults/purge/action	operator
microsoft.keyvault/register/action	operator
microsoft.keyvault/unregister/action	operator
microsoft.keyvault/vaults/deploy/action	operator
microsoft.keyvault/checknameavailability/read	metadata
microsoft.keyvault/deletedvaults/read	metadata
microsoft.keyvault/hsmpools/read	metadata
microsoft.keyvault/locations/deletedvaults/read	metadata
microsoft.keyvault/locations/operationresults/read	metadata
microsoft.keyvault/operations/read	metadata
microsoft.keyvault/vaults/eventgridfilters/read	metadata
microsoft.keyvault/vaults/providers/microsoft.insights/diagnosticsettings/read	metadata
microsoft.keyvault/vaults/providers/microsoft.insights/logdefinitions/read	metadata
microsoft.keyvault/vaults/providers/microsoft.insights/metricdefinitions/read	metadata
microsoft.keyvault/vaults/read	metadata
microsoft.keyvault/vaults/secrets/read	metadata
microsoft.resources/deployments/operations/read	metadata
microsoft.resources/deployments/read	metadata
microsoft.resources/subscriptions/resourcegroups/read	metadata