diff --git a/policies/litellm/admin.yaml b/policies/litellm/admin.yaml
new file mode 100644
index 0000000..321df20
--- /dev/null
+++ b/policies/litellm/admin.yaml
@@ -0,0 +1,26 @@
+# Allow management of the LiteLLM secrets engine (config and roles)
+---
+rules:
+  - path: "litellm/config"
+    capabilities:
+      - create
+      - update
+      - read
+      - delete
+  - path: "litellm/roles/*"
+    capabilities:
+      - create
+      - update
+      - delete
+      - read
+      - list
+  - path: "litellm/roles"
+    capabilities:
+      - read
+      - list
+
+auth:
+  approle:
+    - tf_vault
+  k8s/au/syd1:
+    - woodpecker_terraform_vault