Policy

A Policy defines access rules for Secret paths in a Vault Instance. Use Policies to control which users or applications can read, write, or delete Secrets.

Overview

• Rules: each Policy rule describes a Secret path and the actions allowed on it (read, write, delete).
• Assignment: a Policy grants its permissions to applications through a Role, which attaches the Policy to an Auth Method.
• Lifecycle: a Role that uses a Policy depends on it for access. See Delete a Policy before you delete one.

See also

• Create a Policy
• Delete a Policy