Create a Role

A Role links an Auth Method with a Policy, defining the permissions granted to an application once it authenticates successfully.

Prerequisites

• You have an Auth Method to attach the Role to. See Create an Auth Method.
• You have a Policy to grant through the Role. See Create a Policy.

1. Start creating the Role

On Access Detail, select the Auth Method you created, then click Create.

2. Enter the Role details

On the Create New Role screen, enter the Role Name and add the Policy you created earlier under Assigned Groups. Click Create.

3. Save the Role ID and Secret ID

After successful creation, a popup shows the Role ID and Secret ID. Copy them to wherever your application reads its authentication credentials from.

warning

The Role ID and Secret ID are displayed only once. Save them in a secure location immediately after creation — see Troubleshooting if you lose them.

Next steps

• Key Vault field reference — full field reference for the Role form above.