Add default permissions for reading/listing aliases

hashicorp · Mar 25, 2024 · 4d1f482 · 4d1f482
1 parent c42a940
commit 4d1f482
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/internal/cmd/base/initial_resources.go b/internal/cmd/base/initial_resources.go
@@ -114,6 +114,7 @@ func (b *Server) CreateInitialAuthenticatedUserRole(ctx context.Context, opt ...
 		"ids=*;type=auth-token;actions=list",
 		"ids={{.Account.Id}};actions=read,change-password",
 		"ids=*;type=session;actions=list,read:self,cancel:self",
+		"ids=*;type=alias;actions=list,read",
 	}
 	opts := GetOpts(opt...)
 	if opts.withAuthUserTargetAuthorizeSessionGrant {