LOW
Source
CloudSploit
ID
manage-key-access-and-permissions

Manage Key Access and Permissions

Ensures that no Microsoft Azure user, group or application has administrator privileges to the Key Vaults.

A principal such as a user, group or application should have access to execute only specific operations for Azure Key Vault keys, secrets or certificates as a security best practice.

Ensure that no Microsoft Azure user, group or application is using administrator privileges.