# Global root policy with full access to all paths --- rules: - path: "*" capabilities: - create - read - update - delete - list - sudo auth: ldap: - vault_admin