Policy with LIST capability on everything - dangerous?

Hi,

I am creating a Vault policy for Vault admins because I want to destroy the root token.

How dangerous is it to grant LIST capability on everything?

    path "*" {
      capabilities = [ "list" ]
    }

Best
Nick

1 Like