I have set up 'Always encrypted' on one of the column in Azure SQL DB. Everything worked well except when a user is trying to access he is getting below error. ' I have tried some of the rememdies as below.'Failed to decrypt a column encryption key using key store provider: 'AZURE_KEY_VAULT'. Verify the properties of the column encryption key and its column master key in your database'
- User is mapped in Azure AD group which is also mapped in Azure SQL server. Keys are stored in Azure key vault and the AD group is given 'Contributor' access and 'decrypt', 'encrypt', 'get' , unwrap' access is given through access policy. 'GRANT VIEW ANY COLUMN MASTER KEY DEFINITION' granted to AD group in SQL DB.