From 716d577190d0e75a80c865201c477603133b3a0e Mon Sep 17 00:00:00 2001
From: sylvia-petsanova <104836103+sylvia-petsanova@users.noreply.github.com>
Date: Thu, 2 May 2024 00:09:02 +0300
Subject: [PATCH] Add policy creation to AppRole setup (#26700)

It's not immediately obvious that the demo policy needs to be created beforehand and does not exist if only the tutorial steps are followed. Prompted by support ticket ZD-143426.
---
 website/content/docs/platform/servicenow/installation.mdx | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/website/content/docs/platform/servicenow/installation.mdx b/website/content/docs/platform/servicenow/installation.mdx
index 5838952432..d932fead66 100644
--- a/website/content/docs/platform/servicenow/installation.mdx
+++ b/website/content/docs/platform/servicenow/installation.mdx
@@ -21,6 +21,11 @@ description: Installation steps for the Vault ServiceNow Credential Resolver.
 
     ```bash
     vault auth enable approle
+    vault policy write demo - <<EOF
+    path "secret/*" {
+      capabilities = ["read"]
+    }
+    EOF
     vault write auth/approle/role/role1 bind_secret_id=true token_policies=demo
     ```