In Azure Key Vault, you can manage access to your application secrets by setting permissions at any level except _.
on the Key Vault instance
by secret type
at the Azure Subscription level
on the secret itself