The Vault policies to use when requesting a token for a job, separated by newlines. If left empty, this will use all policies from the configured authentication. This is useful for AppRole authentication where the AppRole can have many policies attached it and divide up the policies per job based on the job folder or name. This allows you to restrict access on specific jobs or folders. Each policy can use the following tokens to templatize the policies: For example, a policy list such as: Would result in six policies being applied to each job run. If the JOB_NAME was "folder1/folder2/job1" and the JOB_BASE_NAME was "job1", the policies applied would be: Please note that the AppRole should have all policies configured as token_policies and not identity_policies, as job-specific tokens inherit all identity_policies automatically.