From efa9673600f5c2052d909a68f935e007e0a3d316 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Thu, 28 May 2026 09:58:17 +0000 Subject: [PATCH 1/2] Initial plan From 620beb0498a13d962981a032a6cc467e4f3763bc Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Thu, 28 May 2026 10:03:48 +0000 Subject: [PATCH 2/2] Fix keyvault role assignment create/list to use request scope instead of root scope --- src/azure-cli/azure/cli/command_modules/keyvault/custom.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/azure-cli/azure/cli/command_modules/keyvault/custom.py b/src/azure-cli/azure/cli/command_modules/keyvault/custom.py index fb345d93677..9037b5419c3 100644 --- a/src/azure-cli/azure/cli/command_modules/keyvault/custom.py +++ b/src/azure-cli/azure/cli/command_modules/keyvault/custom.py @@ -1939,7 +1939,7 @@ def create_role_assignment(cmd, client, role, scope, assignee_object_id=None, name=role_assignment_name, ) - role_defs = list_role_definitions(client) + role_defs = list_role_definitions(client, scope=scope) role_dics = _get_role_dics(role_defs) principal_dics = _get_principal_dics(cmd.cli_ctx, [role_assignment]) @@ -2004,7 +2004,7 @@ def list_role_assignments(cmd, client, scope=None, assignee=None, role=None, ass continue matched_role_assignments.append(role_assignment) - role_defs = list_role_definitions(client) + role_defs = list_role_definitions(client, scope=query_scope) role_dics = _get_role_dics(role_defs) principal_dics = _get_principal_dics(cmd.cli_ctx, matched_role_assignments)