title: How to assign a vault policy to a ldap group/user
body: <p>I am trying to use vault in my application. The authentication mechanism i am using is LDAP. I have done the configuration and my users are able to login to vault but they are not able to see any secret engines that I created as a root user.</p>
  <p>For example I have enabled a secret engine <code>secrets/kv</code> and created 2 keys inside it. What i want is my ldap users to read/write secrets directly from UI. My policy file looks like this -</p>
  <pre><code>path &quot;secret/kv&quot;
  {
    capabilities = [&quot;read&quot;, &quot;update&quot;, &quot;list&quot;]
  }
  
  path &quot;auth/*&quot;
  {
    capabilities = [&quot;create&quot;, &quot;read&quot;, &quot;update&quot;, &quot;delete&quot;, &quot;list&quot;, &quot;sudo&quot;]
  }
  </code></pre>
  <p>And use issued the below command to write the data -
  <code>vault write auth/ldap/groups/ldap-group policies=my-policy</code></p>
  <p>Still the users can't see the kv engine on the UI to read/write secrets.</p>
  <p>Let me know if anyone can help me with this.</p>