How to get the list of users/groups and their policy associations?

[senthil1988]

Hello - Can somebody help with getting the list of users/groups with the associated policies ? We have some superuser policies and we would like to know what groups/users having access to ?

Thanks in Advance,
Senthil

[maxb]

Here is a previous post relating to this question:

Policy members - how to identify all members of a policy?

Strictly speaking, policies don’t have members. I know what you mean, though, and Vault doesn’t have a built in answer for this - it requires the Vault admin to write a program that makes a multitude of different API calls to Vault. Essentially you have to crawl the Vault API yourself, looking for all of the various places policies can be configured. Key places to look are: identity/entity/id/* in the policies field identity/group/id/* in the policies field Read the full list of your auth …