This can be accomplished after the VM has been deployed by going into Settings. From their you will click on Identity. Under system assigned you can cycle the status to on and it will generate that particular resource an identity in Azure Active Directory. You will then be able to grant access to the proper secrets in Key Vault by utilizing your permissions.
@Admin O365
