Create a Policy

A Policy defines access rules for Secret paths in a Vault. Use Policies to control which users or applications can read, write, or delete Secrets.

Prerequisites

• You have a Vault Instance. See Create a Vault Instance.

1. Open Key Vault Management

On Key Vault Management, select the Key Vault to add a Policy to.

2. Start creating the Policy

Open the Policies tab and click Create.

3. Enter the Policy details

On the Create New Policy screen, enter a Name and the Rule describing the Secret path users or applications can access. See the Key Vault field reference for what each field means.

4. Confirm creation

Click Create. The system sends a confirmation message and adds the new Policy to the list.

Next steps

• Create a Role — attach this Policy to a Role so an application can use it.
• Delete a Policy — remove a Policy you no longer need.