Keys
Operations | Required Permissions |
---|---|
List/Get keys | ReadKey |
Create key | CreateLink ReadKey UseKey (for internal requests) ExportKey CreateKey |
Update key | UpdateKey UpdateKeyAppMeta ReadKey |
Delete key | DeleteKey ReadKey |
List versions of a key | ReadKey |
Create version of a key | CreateKeyVersion ExportKey |
Destroy a key | DeleteKey ReadKey |
Archive a key | ArchiveKey ReadKey |
Recover a key | RecoverKey ReadKey |
Revoke a key | RevokeKey ReadKey |
Reactivate a key | ReActivateKey ReadKey |
Export a key | ExportKey ReadKey |
Clone a key | CloneKey UseKey ReadKey |
List key labels | ReadKey |
Query keys | ReadKey |
MKEK
Operations | Required Permissions |
---|---|
List/Get Mkeks | ReadMkek |
Rotate Mkek | RotateMkek |
Root of Trust Keys
Operations | Required Permissions |
---|---|
List/Get rot-keys | ReadRoTKey |
Delete rot-keys | DeleteRoTKey |
Rotate rot-keys | RotateRoTKey |
SSH Keys
Operations | Required Permissions |
---|---|
Add ssh keys | No permission needed |