In Azure Key Vault, you can manage access to your application secrets by setting permissions at any level except _.
at the Azure Subscription level
on the secret itself
by secret type
on the Key Vault instance