Describe the bug
az keyvault set-policy command needs an additional parameter to allow users to add an on-behalf-of access policy for combined identities, an azure feature where a combined identity is made from the application id of one identity and the object id of another

To Reproduce
No reproduction needed. The possibility simply does not exist.

Expected behavior
Add "--application-id" as a parameter which can be used at the same time as "--object-id". This possibility exists in the Azure Portal as well as Powershell and REST APIs and is required for assigning permissions to combined identities.

Environment summary
All AFAIK.

Additional context
Documentation for Az Powershell which has this feature

Copying this issue as it was closed without ever being fixed: Previous issue