I created an Azure function app with an ARM template. The function app has a system-assigned identity. The identity has an access policy with get/list rights for keys, secrets,