An Azure Function uses Key Vault References in its App Settings. Which managed identity type must be configured?
- A No identity required
- B System-assigned or user-assigned managed identity with Key Vault Secrets User role (correct answer)
- C Service principal with certificate
- D Admin account
Shortcut: ) reference at runtime.
Key Vault References require the function app's managed identity to have Key Vault Secrets User (or equivalent access policy) to resolve the @Microsoft.KeyVault(...) reference at runtime.