Error while querying 'Always encrypted' column

Question

I have set up 'Always encrypted' on one of the column in Azure SQL DB. Everything worked well except when a user is trying to access he is getting below error. ' I have tried some of the rememdies as below.'Failed to decrypt a column encryption key using key store provider: 'AZURE_KEY_VAULT'. Verify the properties of the column encryption key and its column master key in your database'

1. User is mapped in Azure AD group which is also mapped in Azure SQL server. Keys are stored in Azure key vault and the AD group is given 'Contributor' access and 'decrypt', 'encrypt', 'get' , unwrap' access is given through access policy. 'GRANT VIEW ANY COLUMN MASTER KEY DEFINITION' granted to AD group in SQL DB.

Answer 1

I have managed to fix the issue. It was related with the Azure key vault firewall. The member who wants to 'decrypt' the data should have white listed their IP address in Azure key vault as well along with other accesses in access policy mentioned here 'https://stackoverflow.com/questions/57735293/failed-to-decrypt-a-column-encryption-key-using-key-store-provider-azure-key-v'

Once I added member's IP address in key vault firewall he is able to see encrypted data. Hope it helps.