Admin policy in vault

vault-admin-policy.hcl

path "auth/userpass/users/+" {
  capabilities = ["create", "read", "delete", "update", "list"]
  allowed_parameters = {
    "token-policies" = ["default", "policies/*"]
    "policies" = ["default", "policies/*"]
    "*" = []
  }
}

path "auth/userpass/users/+/policies" {
  capabilities = ["create", "read", "delete", "update", "list"]
  allowed_parameters = {
    "token-policies" = ["default", "policies/*"]
    "policies" = ["default", "policies/*"]
    "*" = []
  }
}