+------------+--------------------------------------------+
| ID         | cck-003                                    |
| Key        | https://a-vault.vault.azure.net/keys/a-key |
| Roles      | 00000000-0000-0000-0000-000000000000       |
| Cloud      | Azure                                      |
| State      | AVAILABLE                                  |
| Created At | 2023-01-01 12:00:30 +0000 UTC              |
+------------+--------------------------------------------+

To ensure the key vault has the correct role assignments, please run the following Azure CLI command (certified for `az` v2.45):

az role assignment create \
    --role "e147488a-f6f5-4113-8e2d-b22465e65bf6" \
    --scope "$(az keyvault show --name "a-vault" --query id --output tsv)" \
    --assignee-object-id "$(az ad sp show --id "00000000-0000-0000-0000-000000000000" --query id --out tsv 2>/dev/null || az ad sp create --id "00000000-0000-0000-0000-000000000000" --query id --out tsv)" \
    --assignee-principal-type ServicePrincipal && \
az role assignment create \
    --role "21090545-7ca7-4776-b22c-e363652d74d2" \
    --scope "$(az keyvault show --name "a-vault" --query id --output tsv)" \
    --assignee-object-id "$(az ad sp show --id "00000000-0000-0000-0000-000000000000" --query id --out tsv 2>/dev/null || az ad sp create --id "00000000-0000-0000-0000-000000000000" --query id --out tsv)" \
    --assignee-principal-type ServicePrincipal
