It’s worth mixing the Portal and CLI for this one - you can see the lifecycle of secrets more clearly in the Portal, but you get more useful error messages in the CLI :)
You’ll find you’re blocked from the Key Vault so you’ll need to get access first, then you can manage the secret.
Need more? Here’s the solution.