Please specify --assignee or --assignee-object-id is required parameters to create a new role assignment for a user, group, or service principal.

[samaltaskal]

az feedback auto-generates most of the information requested below, as of CLI version 2.0.62

Describe the bug
As shown below, to create a new role assignment for a user, group, or service principal using Azure CLI command "az keyvault role assignment create" "--assignee or --assignee-object-id" are optional parameters but to create a new role assignment, either "--assignee" or "--assignee-object-id" is required to specify

To Reproduce
Please execute Azure CLI command - 'az keyvault role assignment create --hsm-name --role "" --scope /'

Expected behavior
'az keyvault role assignment create --hsm-name --role "" --scope / --assignee ""' or 'az keyvault role assignment create --hsm-name --role "" --scope / --assignee-object-id "assignee object id"'

Environment summary
Install Method CLI version (az --version) on Windows/Linux)

Additional context

[yonzhan]

keyvault

[evelyn-ys]

--assignee and --assignee-object-id are not required because you can specify any of them. When you specify --assignee, --assignee-object-id shouldn't be required and vice versa.

But they can't be all None, as this command is used for assigning role to some user, sp or group. You have to tell who the assignee is.