diff --git a/README.md b/README.md
index 9cf37d1..33f7028 100644
--- a/README.md
+++ b/README.md
@@ -32,6 +32,7 @@ Apart from these keep the following items handy as it would be required during d
 - Custom Application Name which would be used to create AppServices/Functions (resource_name_prefix)
 - Custom Resource Group Name where all the resources will be deployed
 - Location/code to deploy the Azure Resources (e.g. Central US/centralus. Powershell Command: Get-AzureRmLocation |Format-Table)
+- Assign "Key Vault Secrets User" role to the deployment principal
 
 
 ### Installing
diff --git a/scripts/template.json b/scripts/template.json
index 5890bd1..40ce082 100644
--- a/scripts/template.json
+++ b/scripts/template.json
@@ -745,7 +745,7 @@
                 "enabledForTemplateDeployment": true,
                 "enableSoftDelete": true,
                 "softDeleteRetentionInDays": 90,
-                "enableRbacAuthorization": false
+                "enableRbacAuthorization": true
               }
             },
             {
@@ -977,11 +977,11 @@
                     "description": "Allow all access"
                   }
                 ],
-                "scmIpSecurityRestrictionsUseMain": false,
+                "scmIpSecurityRestrictionsUseMain": true,
                 "http20Enabled": false,
                 "minTlsVersion": "1.2",
-                "scmMinTlsVersion": "1.0",
-                "ftpsState": "FtpsOnly",
+                "scmMinTlsVersion": "1.2",
+                "ftpsState": "Disabled",
                 "preWarmedInstanceCount": 0,
                 "functionAppScaleLimit": 0,
                 "functionsRuntimeScaleMonitoringEnabled": false,
@@ -1158,8 +1158,7 @@
                 "AzureAppConfigurationUrl": "[concat('https://',parameters('appConfigurationName'), '.azconfig.io')]",
                 "ComponentName": "ApprovalsCoreServicesAPI",
                 "ValidAppIds": "",
-                "ValidAudienceUrl": "",
-                "WEBSITE_LOAD_CERTIFICATES": "*"
+                "ValidAudienceUrl": ""
               }
             },
             {
@@ -1465,8 +1464,7 @@
                 "AzureWebJobsDashboard": "[concat('@Microsoft.KeyVault(SecretUri=https://',parameters('keyVaultName'), '.vault.azure.net/secrets/StorageConnectionString)')]",
                 "AzureWebJobsStorage": "[concat('@Microsoft.KeyVault(SecretUri=https://',parameters('keyVaultName'), '.vault.azure.net/secrets/StorageConnectionString)')]",
                 "ComponentName": "ApprovalsNotificationProcessor",
-                "FUNCTIONS_EXTENSION_VERSION": "~3",
-                "WEBSITE_LOAD_CERTIFICATES": "*"
+                "FUNCTIONS_EXTENSION_VERSION": "~3"
               }
             },
             {
@@ -1893,4 +1891,4 @@
       }
     }
   ]
-}
\ No newline at end of file
+}
diff --git a/scripts/template_devtools.json b/scripts/template_devtools.json
index 61a7a51..29efdfc 100644
--- a/scripts/template_devtools.json
+++ b/scripts/template_devtools.json
@@ -363,11 +363,11 @@
                     "description": "Allow all access"
                   }
                 ],
-                "scmIpSecurityRestrictionsUseMain": false,
+                "scmIpSecurityRestrictionsUseMain": true,
                 "http20Enabled": false,
                 "minTlsVersion": "1.2",
-                "scmMinTlsVersion": "1.0",
-                "ftpsState": "FtpsOnly",
+                "scmMinTlsVersion": "1.2",
+                "ftpsState": "Disabled",
                 "preWarmedInstanceCount": 0,
                 "functionAppScaleLimit": 0,
                 "functionsRuntimeScaleMonitoringEnabled": false,
@@ -492,11 +492,11 @@
                     "description": "Allow all access"
                   }
                 ],
-                "scmIpSecurityRestrictionsUseMain": false,
+                "scmIpSecurityRestrictionsUseMain": true,
                 "http20Enabled": false,
                 "minTlsVersion": "1.2",
-                "scmMinTlsVersion": "1.0",
-                "ftpsState": "FtpsOnly",
+                "scmMinTlsVersion": "1.2",
+                "ftpsState": "Disabled",
                 "preWarmedInstanceCount": 0,
                 "functionAppScaleLimit": 0,
                 "functionsRuntimeScaleMonitoringEnabled": false,
@@ -642,11 +642,11 @@
                     "description": "Allow all access"
                   }
                 ],
-                "scmIpSecurityRestrictionsUseMain": false,
+                "scmIpSecurityRestrictionsUseMain": true,
                 "http20Enabled": false,
                 "minTlsVersion": "1.2",
-                "scmMinTlsVersion": "1.0",
-                "ftpsState": "FtpsOnly",
+                "scmMinTlsVersion": "1.2",
+                "ftpsState": "Disabled",
                 "preWarmedInstanceCount": 0,
                 "functionAppScaleLimit": 0,
                 "functionsRuntimeScaleMonitoringEnabled": false,
@@ -771,11 +771,11 @@
                     "description": "Allow all access"
                   }
                 ],
-                "scmIpSecurityRestrictionsUseMain": false,
+                "scmIpSecurityRestrictionsUseMain": true,
                 "http20Enabled": false,
                 "minTlsVersion": "1.2",
-                "scmMinTlsVersion": "1.0",
-                "ftpsState": "FtpsOnly",
+                "scmMinTlsVersion": "1.2",
+                "ftpsState": "Disabled",
                 "preWarmedInstanceCount": 0,
                 "functionAppScaleLimit": 0,
                 "functionsRuntimeScaleMonitoringEnabled": false,
@@ -932,7 +932,6 @@
                 "AzureWebJobsDashboard": "",
                 "FUNCTIONS_EXTENSION_VERSION": "~3",
                 "ValidAppIds": "",
-                "WEBSITE_LOAD_CERTIFICATES": "*",
                 "AppConfigurationLabel": "",
                 "AzureAppConfigurationUrl": ""
               }
@@ -1067,8 +1066,7 @@
                 "AzureWebJobsStorage": "",
                 "AzureWebJobsDashboard": "",
                 "FUNCTIONS_EXTENSION_VERSION": "~3",
-                "StorageAccountName": "",
-                "WEBSITE_LOAD_CERTIFICATES": "*"
+                "StorageAccountName": ""
               }
             },
             {
@@ -1202,8 +1200,7 @@
                 "AzureWebJobsDashboard": "",
                 "ComponentName": "TenantOnboardingHelperProcessor",
                 "FUNCTIONS_EXTENSION_VERSION": "~3",
-                "StorageAccountName": "",
-                "WEBSITE_LOAD_CERTIFICATES": "*"
+                "StorageAccountName": ""
               }
             },
             {
@@ -1224,4 +1221,4 @@
       }
     }
   ]
-}
\ No newline at end of file
+}