title: Azure Keyvault - "Operation "list" is not allowed by vault policy" but all permissions are checked
body: <p>I am accessing KeyVault with .NET client with an AAD application. Although all permissions under secrets are enabled for this AAD app (screenshot below) I am getting "The operation "List" is not enabled in this key vault's access policy" if I navigate to the Secret panel.</p>
  
  <p>I would like to be able to set the permissions via the AAD application and so using Powershell wouldn't be an option.</p>
  
  <p>If I set the permissions via Powershell - it does work.</p>
  
  <p>How I'm creating my access policies:</p>
  
  <pre><code>        var accessPolicy = new AccessPolicyEntry
          {
  
              ApplicationId = app,
              ObjectId = Obid,
              PermissionsRawJsonString = "{ \"keys\": [ \"all\" ], \"secrets\": [ \"all\"  ], \"certificates\": [ \"all\" ] }",
              TenantId = ten,
  
          };
  
          return accessPolicy;
  </code></pre>
  
  <p>which gives me
  <a href="https://i.stack.imgur.com/F9nsU.png" rel="noreferrer"><img src="https://i.stack.imgur.com/F9nsU.png" alt="enter image description here"></a></p>
  
  <p>Then the list error appears and so I have to use</p>
  
  <pre><code>Set-AzureRmKeyVaultAccessPolicy -VaultName vaultname -ResourceGroupName location -ObjectId obid -PermissionsToKeys all -PermissionsToSecrets all 
  </code></pre>
  
  <p>That will get rid of the error but I would much prefer a solution so I can work with the .NET SDK to resolve. </p>