# Vault backup with read only token

**URL:** <https://discuss.hashicorp.com/t/vault-backup-with-read-only-token/52830>\
**Category:** Vault\
**Created:** [April 18, 2023, 11:45am UTC](https://discuss.hashicorp.com/t/vault-backup-with-read-only-token/52830 "2023-04-18T11:45:47Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![GorSarg](https://sea2.discourse-cdn.com/hashicorp/user_avatar/discuss.hashicorp.com/gorsarg/32/35243_2.png) [@GorSarg](https://discuss.hashicorp.com/u/GorSarg)\
**Post date:** [April 18, 2023, 11:45am UTC](https://discuss.hashicorp.com/t/vault-backup-with-read-only-token/52830/1 "2023-04-18T11:45:47Z")

</div>

hi guys  
can I create a vault backup with a read-only token?  
command: vault operator raft snapshot save /path/to/file  
version: 1.13.1

---

<div class="post-metadata">

**Author:** ![maxb](https://sea2.discourse-cdn.com/hashicorp/user_avatar/discuss.hashicorp.com/maxb/32/26655_2.png) [@maxb](https://discuss.hashicorp.com/u/maxb)\
**Post date:** [April 18, 2023, 1:08pm UTC](https://discuss.hashicorp.com/t/vault-backup-with-read-only-token/52830/2 "2023-04-18T13:08:38Z")

</div>

> [@GorSarg](#):
>
> read-only token

Vault does not have a concept of a “read-only token”. You will need to explain what you are asking more clearly.

---

<div class="post-metadata">

**Author:** ![GorSarg](https://sea2.discourse-cdn.com/hashicorp/user_avatar/discuss.hashicorp.com/gorsarg/32/35243_2.png) [@GorSarg](https://discuss.hashicorp.com/u/GorSarg)\
**Post date:** [April 18, 2023, 1:22pm UTC](https://discuss.hashicorp.com/t/vault-backup-with-read-only-token/52830/3 "2023-04-18T13:22:20Z")

</div>

A cronjob is now in place to backup vault data. This makes use of the root token. I’d like to replace it with a minimal set of privileges.