Create a key vault

The SharePoint Online microservice requires a key vault with a certificate to verify API calls made to SharePoint Online by the microservice, as well as an access policy that grants key, secret and certificate permissions to assigned applications. These permissions will be granted to the SharePoint Online app service hosting the microservice.

Create the key vault

1. In Azure, create a key vault.

2. Navigate to the Certificate page for the key vault and generate a self-signed certificate for it.
   

   

3. Download the certificate in CER format. You will add this to the service principal you created for the SharePoint Online microservice.
   

   

4. Add an access policy to the key vault with the below Key, Secret and Certificate permissions.

   • Key Permissions

     • Get

     • Decrypt

     • Unwrap Key

     • Verify

   • Secret Permissions

     • Get

     • List

     • Set

     • Delete

     • Purge

   • Certificate Permissions

     • Get

5. Select the SharePoint Online app service you created earlier as the service principal.