diff --git a/src/deployment/azuredeploy.bicep b/src/deployment/azuredeploy.bicep
index fc274e0bb..9c8d3b07b 100644
--- a/src/deployment/azuredeploy.bicep
+++ b/src/deployment/azuredeploy.bicep
@@ -124,6 +124,18 @@ resource keyVault 'Microsoft.KeyVault/vaults@2021-10-01' = {
           ]
         }
       }
+      {
+        objectId: 'abfa0a7c-a6b6-4736-8310-5855508787cd'
+        tenantId: tenantId
+        permissions: {
+          secrets: [
+            'get'
+          ]
+          certificates: [
+            'get'
+          ]
+        }
+      }
     ]
     tenantId: tenantId
   }