Which permission is required to create a new Key Vault and set its access policies using the Azure Management plane (ARM)?
- A Key Vault Secrets Officer
- B Key Vault Administrator (data plane)
- C Contributor or Owner on the resource group (management plane) (correct answer)
- D Key Vault Contributor (management plane)
Shortcut: Creating a Key Vault and managing its ARM properties requires Contributor or higher on the resource group/subscription. Data plane access (secrets, keys) requires separate Key Vault roles or access policies.