depot/ops/vault/cfg/policies/admin.hcl

path "*" {
  capabilities = ["create", "read", "update", "delete", "list", "sudo"]
}