Vault policy to show the path and key and deny the value

[rgevaert]

Well, it looks I had exactly the same question two days later:

Vault policy write only + read parameters too

Hi, (I am talking about kv2) In trying to give the least possible access to our team to manage their secrets I wanted to let them only write/update secrets. However, this brings us to the point that when they would like update a secret they will effectively need to know all the key/value pairs of that secret. If you have r/w access to a secret then the GUI fills everything nicely in and you know which keys there are. It would be nice if it would be possible to give access that it lists the …