HashiCorp - Vault Associate Study Guide

3: Vault tokens

This chapter walks through the token layer of Vault, the credential type that every caller presents on every request. It defines the two primary token classes, explains root tokens and orphan tokens, dissects the accessor object, quantifies how default and maximum time-to-live values shape a session lifecycle, and finishes with the token role mechanism that lets operators pre-authorize the creation of downstream tokens under fixed constraints.