diff --git a/policies/kv/service/openldap/default_user_password/read.yaml b/policies/kv/service/openldap/default_user_password/read.yaml
new file mode 100644
index 0000000..8cf866f
--- /dev/null
+++ b/policies/kv/service/openldap/default_user_password/read.yaml
@@ -0,0 +1,10 @@
+# Allow reading openldap default-user credentials
+---
+rules:
+  - path: "kv/data/service/openldap/default_user_password"
+    capabilities:
+      - read
+
+auth:
+  approle:
+    - terraform_ldap
diff --git a/policies/kv/service/openldap/ldap_admin_password/read.yaml b/policies/kv/service/openldap/ldap_admin_password/read.yaml
index ac90f6d..ede3b98 100644
--- a/policies/kv/service/openldap/ldap_admin_password/read.yaml
+++ b/policies/kv/service/openldap/ldap_admin_password/read.yaml
@@ -1,4 +1,4 @@
-# Allow reading Radarr configuration
+# Allow reading openldap admin credentials
 ---
 rules:
   - path: "kv/data/service/openldap/ldap_admin_password"