mirrors/vault
1
0
Fork 0
mirror of https://github.com/hashicorp/vault.git synced 2025-11-28 14:11:10 +01:00
Code Issues Projects Releases Wiki Activity

[Docs] Minor editorial fixes - "token capabilities" (#27851)

Browse Source 
* Minor editorial fixes

* Fix a typo
This commit is contained in:
Yoko Hyakuna 2024-07-24 09:00:53 -07:00 committed by GitHub
parent a28464b860
commit f2ce14b4b2
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 13 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
website/content/docs/commands/token/capabilities.mdx
View File

@ -11,27 +11,33 @@ description: |-
The `token capabilities` command fetches the capabilities of a token for a given The `token capabilities` command fetches the capabilities of a token for a given
path. path.
If a TOKEN is provided as an argument, this command uses the "/sys/capabilities" If you pass a token value as an argument, this command uses the
endpoint and permission. If no TOKEN is provided, this command uses the `/sys/capabilities` endpoint and permission. In the absence of an explicit token
"/sys/capabilities-self" endpoint and permission with the locally authenticated value, this command uses the `/sys/capabilities-self` endpoint and permission
token. with the locally authenticated token.
## Examples ## Examples
List capabilities for the local token on the "secret/foo" path: List capabilities for the local token on the `secret/foo` path:
```shell-session ```shell-session
$ vault token capabilities secret/foo $ vault token capabilities secret/foo
read read
``` ```
List capabilities for a token on the "cubbyhole/foo" path: The output shows the local token has read permission on the `secret/foo` path.
List capabilities for a token (`hvs.CAESI...WtiSW5mWUY`) on the `cubbyhole/foo`
path:
```shell-session ```shell-session
$ vault token capabilities 96ddf4bc-d217-f3ba-f9bd-017055595017 database/creds/readonly $ vault token capabilities hvs.CAESI...WtiSW5mWUY database/creds/readonly
deny deny
``` ```
The output shows the token (`hvs.CAESI...WtiSW5mWUY`) has no permission to
operate on the `cubbyhole/foo` path.
## Usage ## Usage
The following flags are available in addition to the [standard set of The following flags are available in addition to the [standard set of