In this blog post I wrote about implementing Role Based Access Control for Azure Key Vault, a new feature that uses roles that can be assigned on the resource level rather than using access policy.

Implement RBAC on Azure Key Vault