How to get the list of users/groups and their policy associations?

[maxb]

Here is a previous post relating to this question:

Policy members - how to identify all members of a policy?

Strictly speaking, policies don’t have members. I know what you mean, though, and Vault doesn’t have a built in answer for this - it requires the Vault admin to write a program that makes a multitude of different API calls to Vault. Essentially you have to crawl the Vault API yourself, looking for all of the various places policies can be configured. Key places to look are: identity/entity/id/* in the policies field identity/group/id/* in the policies field Read the full list of your auth …