In Azure Key Vault, you can manage access to your application secrets by setting permissions at any level except _.
on the secret itself
by secret type
on the Key Vault instance
at the Azure Subscription level