title: Azure Powershell : Get-AzureKeyVaultSecret : Operation "get" is not allowed
body: <p>I logged into to azure powershell using a service principle with a certificate, like this :    </p>
  
  <pre><code>Add-AzureRmAccount -ServicePrincipal -CertificateThumbprint  $thumbprint -ApplicationId   $applicationid -TenantId $tenant
  </code></pre>
  
  <p>Then I tried to get a azure secret : </p>
  
  <pre><code>$b = Get-AzureKeyVaultSecret -VaultName $keyVaultName -Name 'AccountKey'
  </code></pre>
  
  <p>But I get an error :  </p>
  
  <blockquote>
    <p>"get" is not allowed</p>
  </blockquote>
  
  <p>I thought I gave read access, like this :</p>
  
  <pre><code>New-AzureRmRoleAssignment -RoleDefinitionName Reader -ServicePrincipalName $azureAdApplication.ApplicationId.Guid 
  </code></pre>
  
  <p>Any suggestions?</p>