With Azure role-based access control (RBAC) for Azure Key Vault on data plane, you can achieve unified management and access control across Azure Resources.
With this capability, you can now manage RBAC for Key Vault keys, certificates, and secrets with roles assignment scope available from management group to individual key, certificate, and secret. When enabled, Azure AD users and services will be validated exclusively by Azure RBAC.
Learn more.