# "Per-client" picing and the JWT auth method

**URL:** <https://discuss.hashicorp.com/t/per-client-picing-and-the-jwt-auth-method/30007>\
**Category:** HCP Vault\
**Created:** [September 28, 2021, 2:50pm UTC](https://discuss.hashicorp.com/t/per-client-picing-and-the-jwt-auth-method/30007 "2021-09-28T14:50:44Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![randomswdev](https://sea2.discourse-cdn.com/hashicorp/user_avatar/discuss.hashicorp.com/randomswdev/32/1694_2.png) [@randomswdev](https://discuss.hashicorp.com/u/randomswdev)\
**Post date:** [September 28, 2021, 2:50pm UTC](https://discuss.hashicorp.com/t/per-client-picing-and-the-jwt-auth-method/30007/1 "2021-09-28T14:50:45Z")

</div>

The [What is a client](https://cloud.hashicorp.com/docs/vault/what-is-a-client#authentication-methods-and-how-they-re-counted-in-vault) page describes what is an identity when using the JWT auth engine. It says:

> Configurable via user\_claim to one of the presented claims (no default value)\*\*

Assume that I use the same JWT token (thus the user\_claim is always the same) to login with different [roles](https://www.vaultproject.io/docs/auth/jwt#configuration), each one linked to different policies and thus able to access different secrets, does the JWT token still counts a single client?