#Vault access policy

Follow the steps below to create a key vault:

1. In the , enter Key vaults in the search box on the top, and then select the first result to access the Key vaults page.

2. Click Create. The Create a key vault page appears.

3. In the Basics tab, provide the basic information for the key vault, and then click the Access configuration tab.

4. In the Permission model section, select Vault access policy.

5. In the Access policies section, click Create.

6. The Create an access policy pane appears. In the Permissions tab, select the following Key permissions:

   • In the Key Management Operations field, select Get.

   • In the Cryptographic Operations field, select Decrypt and Encrypt.

7. Click Next to go to the Principal tab.

8. In the Principal pane, complete the following steps:

   1. Enter the application name or application ID in the search box.

   2. Select the application and click Select at the bottom.

   3. Click Next at the bottom.

9. Click Create to add the access policy.

10. Click the Networking tab.

11. Select Enable public access which allows all networks to connect to this key vault.

    *Note: If you only allow AvePoint Online Services and the AvePoint cloud services you are using to connect to this key vault, you can edit the key vault’s firewall settings after the key vault provisioning.

12. Click the Tags tab, and you can add tags to categorize your key vault.

13. Click Review + create to review all of your configurations first, and then click Create at the bottom to create the key vault.

    *Note: If you need to change some settings before creating the key vault, you can click the Previous button to change previous settings.