Permissions for Hashicorp Vault template

[Midas1989]

Dear zabbix community,

i don't see what permission the token needs to get all the information from the vault.

I do not want to make it too generous
Can someone tell me what the policy must look like?

Thanks for help

[Midas1989]

so i have found all permissions for work


a policy with the follow content
path "/sys/metrics" {
capabilities = ["list" , "read"]
}

path "auth/token/lookup-accessor" {
capabilities = ["read", "update"]
}

and this content in the vault.hcl file
telemetry {
disable_hostname = true
prometheus_retention_time = "12h"
}