[keyvault-admin] Support Role-based Access Control (RBAC) for data plane via new KeyVaultAccessControlClient

[heaths]

No description provided.

[sadasant]

https://github.com/Azure/azure-sdk-for-net/tree/master/sdk/keyvault/Azure.Security.KeyVault.Administration

[heaths]

Note that we won't have an AdministrationClient, but:

• KeyVaultAccessControlClient
• KeyVaultBackupClient

/cc @jonathandturner @iscai-msft @chlowell @g2vinay @vcolin7 as an FYI

[vcolin7]

@heaths Our other clients in Java don't have a KeyVault prefix, do we want to add it to this one and the backup/restore client?

[heaths]

Definitely should for the RBAC client because we are working on eventual plans to have a generic one, which may well be AccessControlClient. For (KeyVault)BackupClient, @christothes discussed it and were worried that archboard would flag it since something like "BackupClient" would be pretty generic and might clash with other libraries (even outside of Azure SDK), which is why, for example, we prefaced "Certificate", "Key", "Secret", et. al. with "KeyVault". So, my recommendation is, yes, we should preface those class names. But it's certainly open for discussion.

[sadasant]

This issue was moved to September. I'm reopening it since the new client still needs the convenience layer.

[sadasant]

Added this issue to track the work needed more easily: #10799

[sadasant]

Some notes regarding how I came up with PR #10815:

• .Net's API.
• .Net's tests.
• Added this issue to track the work needed more easily: [Key Vault Admin] Pre-release work #10799.
• For tests, use import { v4 as uuidv4 } from "uuid";, as shown here:

  azure-sdk-for-js/sdk/core/core-http/src/util/utils.ts

  Line 4 in 6661ad0

  import { v4 as uuidv4 } from "uuid";

• Online generator for UUID v4: https://www.uuidgenerator.net/version4, useful for comments.

[heaths]

1. Extreme nit: It's ".NET". Don't make me start writing "Typescript"! 😁
2. @christothes hadn't yet updated the model names. I thought we agreed in Teams on "KeyVault" as a prefix to all/most of the types; though, it seems you did preface them all except scope, which we may want to do because that one is Key Vault-specific.