update sdk\keyvault\azure-keyvault-secrets\README.md
@@ -107,7 +107,7 @@ export AZURE_TENANT_ID="tenant id"
Authorize the service principal to perform key operations in your Key Vault:
```Bash
-az keyvault set-policy --name my-key-vault --spn $AZURE_CLIENT_ID --secret-permissions backup delete get list create update
+az keyvault set-policy --name my-key-vault --spn $AZURE_CLIENT_ID --secret-permissions get set list delete backup recover restore purge
```
> Possible permissions:
> - Secret management: set, backup, delete, get, list, purge, recover, restore
