Hello
I am trying to retrieve a credential from a robot credential store and am getting error Status code: 409 (Conflict). Orchestrator response:
Failed to read xxxx from Credential Store type AzureKeyVault (read only) Error code: 2304
I am wondering if it’s because the store is robot default store, not assets
however, it’s the only store where robot accounts are updated, if i add it somewhere else, it won’t necessarily be updated
what do you recommend
Hi again @adext01
I think the answer might be in your own error, notice it says AzureKeyVault (read only). That store type is for robot credentials, orchestrator only reads it when the robot logs in, so an asset trying to read from there fails with 2304
so i dont think assets can point to the robot store, they seem to be different purposes even with the same vault behind
what i would try is creating a second credential store on the same Azure Key Vault but as read/write, then your assets live there and robot credentials keep using the read only one. Same vault, same rotation on the azure side, so nothing goes stale
hope this helps in the investigation 
Hi @adext01
I think the issue may be because the credential is stored in the Robot Default Store and not as a normal Credential Asset.
If the robot credentials are automatically updated there, I would not recommend copying them to another store, because the credentials may not stay in sync.
I would suggest checking whether the Robot Default Store allows the credential to be read from the folder where your process is running, and also check the required permissions.
The 2304 error seems to be related to accessing the credential from the Azure Key Vault store.
Hope this helps!
Hi @adext01,
The credential to another store if it is automatically maintained in the robot default store. First validate Key Vault permissions, credential existence, folder/account mapping, and whether the workflow is using the correct activity to read a Robot Credential versus an Asset.