# Tutorial: Vault Policy update

**URL:** <https://discuss.hashicorp.com/t/tutorial-vault-policy-update/14797>\
**Category:** Vault\
**Created:** [September 28, 2020, 5:47pm UTC](https://discuss.hashicorp.com/t/tutorial-vault-policy-update/14797 "2020-09-28T17:47:47Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![zbaban](https://sea2.discourse-cdn.com/hashicorp/user_avatar/discuss.hashicorp.com/zbaban/32/12158_2.png) [@zbaban](https://discuss.hashicorp.com/u/zbaban)\
**Post date:** [September 28, 2020, 5:47pm UTC](https://discuss.hashicorp.com/t/tutorial-vault-policy-update/14797/1 "2020-09-28T17:47:47Z")

</div>

Hello,  
In the Vault Policy/Check Token Capabilities tutorial, the third step  
$vault token capabilities $ADMIN\_TOKEN sys/auth/approle

should show: create, delete, sudo, update.  
In your tutorial it lists read too, which is not accurate according to the Policy written above (admin-policy.hcl),

```auto
# Create, update, and delete auth methods
path "sys/auth/*"
{
  capabilities = ["create", "update", "delete", "sudo"]
}

```

so it just needs to be updated to avoid confusion.

> **[Vault Policies | Vault - HashiCorp Learn](https://learn.hashicorp.com/tutorials/vault/policies?slug=vault&slug=policies)**
>
> Policies provide a declarative way to grant or forbid access to certain paths
> and operations in Vault. This tutorial walks through policy creation workflows.

Thanks,

Zaid