HashiCorp - Vault Associate Study Guide
This chapter defines Vault's authorization model as a set of path-scoped policies written in HCL that gate every request against a list of capabilities. It covers policy value and precedence, the path grammar including glob and template rules, the eight capability keywords, hands-on policy drafting for common workloads, and the CLI plus web UI mechanics for writing, reading, listing, and revising policies.