doc: explain permissions for Vault sys/capabilties-self

hashicorp · Jul 6, 2022 · b9e084a · b9e084a
1 parent 154bb23
commit b9e084a
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/website/content/docs/integrations/vault-integration.mdx b/website/content/docs/integrations/vault-integration.mdx
@@ -102,7 +102,8 @@ path "auth/token/revoke-accessor" {
 }
 
 # Allow checking the capabilities of our own token. This is used to validate the
-# token upon startup.
+# token upon startup. Note this requires update permissions because the Vault API
+# is a POST
 path "sys/capabilities-self" {
   capabilities = ["update"]
 }