| Admin | Maintainer | User | |
|---|---|---|---|
| Policy | Create, Read, Update | Read | - |
| AppRole | Create, Read, Update, Delete | Create, Read, Update, Delete | - |
| Secret Engine/Mount | Create, Read, Update, Delete | Create, Read, Update | Read |
the admins are basically root on that namespace, they can create groups, policies, attachments, anything
| Secret | Create, Read, Update, Delete | Create, Read, Update, Delete | Read |
| Namespace | Create, Read, Update, Delete | Read | ? |
| Group | Create, Read, Update, Delete | Read | ? |
| Authentication Method | Create, Read, Update, Delete | - | ? |
and normal user, should be able to create secret engine, approles, secrets