Set-AzKeyVaultAccessPolicy - Ability to provide "all" as input to permissions

[o-l-a-v]

Description of the new feature

API clearly supports "all" for a given permission, as the following screen shot shows (from (Get-AzKeyVault -KeyVaultName $KeyVaultName).'AccessPolicies')

But trying to Set-AzKeyVaultAccessPolicy with "all" fails when validated against [ValidateSet()]

Because of this, the code that has to be used to set all permissions gets dumb long

Set-AzKeyVaultAccessPolicy -VaultName $KeyVaultName -UserPrincipalName $UserPrincipalName `
    -PermissionsToKeys ('decrypt','encrypt','unwrapKey','wrapKey','verify','sign','get','list','update','create','import','delete','backup','restore','recover','purge') `
    -PermissionsToSecrets ('get','list','set','delete','backup','restore','recover','purge') `
    -PermissionsToCertificates ('get','list','delete','create','import','update','managecontacts','getissuers','listissuers','setissuers','deleteissuers','manageissuers','recover','purge','backup','restore') `
    -PermissionsToStorage ('get','list','delete','set','update','regeneratekey','getsas','listsas','deletesas','setsas','recover','backup','restore','purge')

Proposed implementation details (optional)

Add "all" as valid input to cmdlet, and eventually do what has to be done in regards to the API request.

[dingmeng-xue]

@o-l-a-v , I believe it is due to KeyVault service manages permission according to those keys. Those keys map to features and new key needs to be added when there is new option. You are looking forward to a new key "all" or "*" which can apply to all operations. Please correct me if I understand your requirement incorrectly.

@RandalliLama, @schaabs, @jlichwa, what's your thought?

[isra-fel]

Key vault team has updated their API spec to accept "all" as an option in Azure/azure-rest-api-specs/pull/11042

We need to:

• Regenerate Microsoft.Azure.Management.KeyVault SDK ( Support to specify "All" as an option when assigning permissions azure-sdk-for-net#16981 )
• Update PowerShell code to allow "all" as well

[isra-fel]

Pull request is merged and the feature will be in our next regular release :)