Prisma Cloud: Error pertaining to Missing Data Action(s) for "Microsoft.KeyVault/vaults/keys/unwrap/action" and "Microsoft.KeyVault/vaults/keys/wrap/action" seen while Onboarding Azure Cloud Account in Prisma Cloud

• Error pertaining to Missing Data Action(s) for "Microsoft.KeyVault/vaults/keys/unwrap/action" and "Microsoft.KeyVault/vaults/keys/wrap/action" seen while Onboarding Azure Cloud Account in Prisma Cloud

GUI Path: Settings > Providers > Select cloud account > Amber status

• Prisma Cloud 
• Azure

• The Permission Error related to KeyVault is seen when the following mentioned Data Action(s) are missing at the Tenant level:

• The missing Data Actions mentioned are not supported for Custom Role
• This is a limitation from Azure end

• Give the 'Key Vault Crypto Service Encryption User` built-in role at Tenant Level which has the mentioned permissions
• These are present in Prisma Cloud's static and dynamic Terraform Templates as well

Procedure to add the 'Key Vault Crypto Service Encryption User' Role:

1. Navigate to Azure Tenant Root > IAM > Roles > search: Key Vault Crypto Service Encryption User
   
   
2. Add the Prisma Cloud Account to the Key Vault Crypto Service Encryption User Role to resolve the issue with ingestion. The permissions are included in the Role.