unifi/example/vault/policies/unifi.hcl

# Access the vault KV (v2) store
path "kv/data/service/unifi" {
  capabilities = ["read"]
}