- add approle for terraform, tf_vault - add policices to manage terraform access to vault - add policices for default access to vault from ldap users