add comment for ObjectID
@@ -36,6 +36,8 @@ type AccessPolicyEntry struct {
TenantID string `json:"tenantID,omitempty"`
// ClientID - The client ID of a user, service principal or security group in the Azure Active Directory tenant for the vault. The client ID must be unique for the list of access policies.
ClientID string `json:"clientID,omitempty"`
+ // ObjectID is the value to use if the access policy is for a user other than the user creating the Key Vault when the creating user does not have access to the Application API which is used to translate ClientID to Object ID
+ // To get around this, use az-cli or the Azure portal to source the ObjectID from your Service Principal
ObjectID string `json:"objectID,omitempty"`
// ApplicationID - Application ID of the client making request on behalf of a principal
ApplicationID string `json:"applicationID,omitempty"`
