azure-keyvault-administration

What it is and what it does

This is the official Azure SDK client library for administering Key Vault Managed HSM instances. It provides three main client classes: KeyVaultAccessControlClient for managing role definitions and assignments, KeyVaultBackupClient for performing full and selective key backups and restores, and KeyVaultSettingsClient for configuring Managed HSM account settings. The library handles long-running operations like pre-backup checks and restore operations through polling abstractions.

The package is tightly integrated with azure-core for HTTP transport and credential handling. It is explicitly designed for Managed HSM only—operations against standard Key Vault instances will fail. The library supports Python 3.9 through 3.13 and is maintained as part of the official Azure SDK for Python.

Use it for:

• Implement role-based access control (RBAC) for Managed HSM by creating and managing role assignments programmatically.
• Automate full or selective key backups and restores for disaster recovery and key rotation workflows.
• Configure Managed HSM account settings such as security policies or operational parameters via the settings client.
• Build administrative dashboards or CLI tools that list and manage role definitions across multiple Managed HSM instances.
• Integrate Managed HSM administration into Infrastructure-as-Code or DevOps pipelines for key vault lifecycle management.

Worth the install?

AI-flagged interpretation of the facts on this page — verify before relying

Manages role-based access control, backup, restore, and settings for Azure Key Vault Managed HSM instances.

Yes. This is the official, actively maintained Azure SDK library for Managed HSM administration. It has low install friction, permissive MIT licensing, no known vulnerabilities, and is in production-stable status. Install it if you need to programmatically manage access control, backups, or settings on an Azure Key Vault Managed HSM; do not use it for standard Key Vault operations.

Install

azure-keyvault-administration on PyPI

pip install azure-keyvault-administration

uv add azure-keyvault-administration

poetry add azure-keyvault-administration

Installing azure-keyvault-administration

Before you install

Low install friction with three lightweight runtime dependencies (isodate, azure-core, typing-extensions). Active maintenance with a release 87 days ago and ongoing repository activity.

License in practice

MIT License permits commercial use, modification, and distribution with minimal restrictions—suitable for most projects.

Quickstart

pip install azure-keyvault-administration

from azure.keyvault.administration import KeyVaultAccessControlClient
from azure.core import credential

client = KeyVaultAccessControlClient(vault_url=MANAGED_HSM_URL, credential=credential)

Requires Python 3.9 or later and an existing Azure Key Vault Managed HSM instance (does not work with standard Key Vault).

Verify before relying

• Whether async variants (azure.keyvault.administration.aio) are production-ready or have known limitations.
• Performance characteristics for large-scale backup/restore operations on Managed HSM.
• Support status for authentication methods beyond those documented in the package description.

Package facts

Evidence: azure_keyvault_administration-4.7.0-py3-none-any.whl

Keywords: azure, azure sdk

Tags

More Cryptography packages