---
id: azure-keyvault-administration
version: "4.7.0"
license: MIT License
license_treatment: permissive
maintenance: active
---

# azure-keyvault-administration — Microsoft Corporation Key Vault Administration Client Library for Python

License: permissive · Maintenance: active · Downloads: 5.2M/mo

## What it is and what it does

This is the official Azure SDK client library for administering Key Vault Managed HSM instances. It provides three main client classes: KeyVaultAccessControlClient for managing role definitions and assignments, KeyVaultBackupClient for performing full and selective key backups and restores, and KeyVaultSettingsClient for configuring Managed HSM account settings. The library handles long-running operations like pre-backup checks and restore operations through polling abstractions.

The package is tightly integrated with azure-core for HTTP transport and credential handling. It is explicitly designed for Managed HSM only—operations against standard Key Vault instances will fail. The library supports Python 3.9 through 3.13 and is maintained as part of the official Azure SDK for Python.

Use it for:

- Implement role-based access control (RBAC) for Managed HSM by creating and managing role assignments programmatically.
- Automate full or selective key backups and restores for disaster recovery and key rotation workflows.
- Configure Managed HSM account settings such as security policies or operational parameters via the settings client.
- Build administrative dashboards or CLI tools that list and manage role definitions across multiple Managed HSM instances.
- Integrate Managed HSM administration into Infrastructure-as-Code or DevOps pipelines for key vault lifecycle management.

## Worth the install?

AI-flagged interpretation of the facts above — verify before relying.

Manages role-based access control, backup, restore, and settings for Azure Key Vault Managed HSM instances.

Yes. This is the official, actively maintained Azure SDK library for Managed HSM administration. It has low install friction, permissive MIT licensing, no known vulnerabilities, and is in production-stable status. Install it if you need to programmatically manage access control, backups, or settings on an Azure Key Vault Managed HSM; do not use it for standard Key Vault operations.

## Install

pip install azure-keyvault-administration
uv add azure-keyvault-administration
poetry add azure-keyvault-administration

## Installing azure-keyvault-administration

Before you install: Low install friction with three lightweight runtime dependencies (isodate, azure-core, typing-extensions). Active maintenance with a release 87 days ago and ongoing repository activity.

License in practice: MIT License permits commercial use, modification, and distribution with minimal restrictions—suitable for most projects.

Quickstart:

pip install azure-keyvault-administration

from azure.keyvault.administration import KeyVaultAccessControlClient
from azure.core import credential

client = KeyVaultAccessControlClient(vault_url=MANAGED_HSM_URL, credential=credential)

Requires Python 3.9 or later and an existing Azure Key Vault Managed HSM instance (does not work with standard Key Vault).

Verify before relying:

- Whether async variants (azure.keyvault.administration.aio) are production-ready or have known limitations.
- Performance characteristics for large-scale backup/restore operations on Managed HSM.
- Support status for authentication methods beyond those documented in the package description.

## Package facts

- License: MIT License (permissive)
- Python support: supports_current
- Install friction: low
- Maintenance: active
- Downloads: 5.2M/month (top 5,000 on PyPI)
- Known vulnerabilities: none known

## Tags

azure key vault administration, managed hsm access control, azure vault backup restore, role-based access control azure, key vault rbac python, managed hsm settings management, azure key vault management client, azure-sdk, key-management, rbac

[View on SkillFed](https://skillfed.io/packages/azure-keyvault-administration) · [View on PyPI](https://pypi.org/project/azure-keyvault-administration/)