> ## Documentation Index
> Fetch the complete documentation index at: https://notes.kodekloud.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Section Overview Configure Access Control

> Learn to secure your Vault deployment by defining access control strategies through identity management, policies, and multi-approval workflows.

In this lesson, you’ll learn how to secure your Vault deployment by defining who can do what—and where. We’ll cover five fundamental topics to establish a robust access-control strategy:

| Topic                              | Description                                                                                                |
| ---------------------------------- | ---------------------------------------------------------------------------------------------------------- |
| Vault Identity Entities and Groups | Structure user identities, group memberships, and attribute mappings for consistent access management.     |
| ACL Policies                       | Author, deploy, and debug fine-grained policies using Vault’s HCL-based policy language.                   |
| Sentinel Policies                  | (Enterprise) Enforce or advise on customizable governance rules across your Vault infrastructure.          |
| Control Groups                     | (Enterprise) Require multi-approval workflows for sensitive operations by defining and configuring groups. |
| Namespaces                         | (Enterprise) Implement multi-tenancy with isolated “Vaults within a Vault” for delegation and isolation.   |

<Callout icon="lightbulb" color="#1CB2FE">
  Identity entities, groups, and ACL policies are available in both Vault Open Source and Enterprise editions.\
  Sentinel policies, control groups, and namespaces require Vault Enterprise.
</Callout>

With this roadmap in place, let’s dive into our first topic: interpreting Vault identity entities and groups.

<CardGroup>
  <Card title="Watch Video" icon="video" cta="Learn more" href="https://learn.kodekloud.com/user/courses/hashicorp-certified-vault-operations-professional-2022/module/968cf007-376b-48c8-83f9-17521b5dd575/lesson/3a41c487-459d-4bed-9293-912ed4bde51e" />
</CardGroup>
