Why? The access policy may need to be changed after a KeyVault has been created. This may be needed to grant the Microsoft.Compute resource provider access to the KeyVault. What? The access policy can be changed by using the Set-AzureRmKeyVaultAccessPolicy Powershell cmdlet. How? Figure 1: Set-AzureRmKeyVaultAccessPolicy cmdlet syntax. Parameter Set: ForVault Set-AzureRmKeyVaultAccessPolicy ` [-VaultName] <System.String> ` [[-ResourceGroupName] …