# Key vault access policy confusing note

**URL:** <https://discuss.hashicorp.com/t/key-vault-access-policy-confusing-note/24928>\
**Category:** Azure\
**Created:** [May 29, 2021, 8:03am UTC](https://discuss.hashicorp.com/t/key-vault-access-policy-confusing-note/24928 "2021-05-29T08:03:51Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![czmirek](https://sea2.discourse-cdn.com/hashicorp/user_avatar/discuss.hashicorp.com/czmirek/32/19708_2.png) [@czmirek](https://discuss.hashicorp.com/u/czmirek)\
**Post date:** [May 29, 2021, 8:03am UTC](https://discuss.hashicorp.com/t/key-vault-access-policy-confusing-note/24928/1 "2021-05-29T08:03:51Z")

</div>

In the documentation of key vault and key vault access policy resource is this note.

[https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/key\_vault](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/key_vault)  
[https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/key\_vault\_access\_policy](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/key_vault_access_policy)

It’s possible to define Key Vault Access Policies both within [the `azurerm_key_vault` resource](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/key_vault) via the `access_policy` block and by using [the `azurerm_key_vault_access_policy` resource](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/key_vault_access_policy). **However it’s not possible to use both methods to manage Access Policies within a KeyVault, since there’ll be conflicts.**

The bold sentence is confusing. I can use both methods (assumingly for managing access policies in key vault) but also it’s not possible to use both methods to manage access policies within a key vault?

So can I use both resources at the same time or not? In which case are there going to be conflicts?