For the key to be used, the following operations must be permitted for the user who accesses Azure's key management service.

• encrypt

• decrypt

• get