diagnose-keyvault-access-failure

Diagnose Keyvault Access Failure

Apply Azure operating rules.

1. Resolve the requested scope; otherwise discover only the authorized scope needed for the question.
2. Inspect vaults, item metadata, access, expiration, networking and consumers through Resource Graph, Key Vault metadata, RBAC, diagnostic logs, private endpoints and workload references.
3. Perform Diagnose Keyvault Access Failure and correlate resource IDs, ownership, environment and timestamps.
4. Verify conclusions with independent configuration or telemetry evidence when available.
5. Return the finding first, then affected resources, evidence, confidence, gaps and safe next actions.

Do not mutate resources unless the user explicitly authorizes the exact targets and impact.