Add permissions to revoke leases to admin

2024-02-05 22:05:26 +01:00 · 2024-02-05 22:05:26 +01:00 · 186b50aecc
parent c5dd40bc14
commit 186b50aecc
1 changed files with 5 additions and 0 deletions
--- a/vault/policies/admin.hcl
+++ b/vault/policies/admin.hcl
@ -27,6 +27,11 @@ path "sys/policies/password/*" {
  capabilities = ["create", "read", "update", "delete", "list", "sudo"]
 }

+# Revoke leases
+path "sys/leases/revoke/*" {
+  capabilities = ["update"]
+}
+
 # Enable and manage authentication methods broadly across Vault

 # Manage auth methods broadly across Vault