Answers: <p>Assuming person B has a role which also allows them access to the path <code>secret/hello</code>, then they would simply run <code>vault read secret/hello</code> from their own machine.</p>
  
  <p>If you're following the demo, I think the vault server will be on your local machine? So if someone else is to connect to it they would need to set <code>VAULT_ADDR</code> to point to the IP where the server is running.</p>
  
Answers: CC BY-SA 3.0
Answers: 2017-11-03T16:17:28.070Z
Answers: 2017-11-03T16:17:28.070Z
Answers: alitheg
Body: <p>When one follows <a href="https://www.vaultproject.io/#/demo/1" rel="nofollow noreferrer">a Hashicorp's Vault demo</a>, one has to issue <code>vault init -key-shares=1 -key-threshold=1</code> at a certain moment that generates a <code>key 1</code> and <code>root token</code>:</p>
  
  <pre><code>Key 1: ABC
  Root Token: XYZ
  </code></pre>
  
  <p>If person A generates a secret by executing <code>vault write secret/hello value=world</code> how could person B check on his/her computer the value of <code>secret/hello</code>?</p>
  
Tags: <hashicorp-vault>
Title: What are best practices for sharing and accessing Vault secrets?
UserDisplayName: 030
ThreadText: # What are best practices for sharing and accessing Vault secrets?
  
  (Asked by: username_0 on 2017-08-11)
  
  When one follows [a Hashicorp's Vault demo](https://www.vaultproject.io/#/demo/1), one has to issue `vault init -key-shares=1 -key-threshold=1` at a certain moment that generates a `key 1` and `root token`:
  
  ```
  Key 1: ABC
  Root Token: XYZ
  
  ```
  
  If person A generates a secret by executing `vault write secret/hello value=world` how could person B check on his/her computer the value of `secret/hello`?
  
  **Tags:** hashicorp-vault
  
  
  ---
  
  ## 1 answers
  
  ### Answer by username_1 on 2017-11-03. Score: 3 | Accepted answer
  
  Assuming person B has a role which also allows them access to the path `secret/hello`, then they would simply run `vault read secret/hello` from their own machine.
  
  If you're following the demo, I think the vault server will be on your local machine? So if someone else is to connect to it they would need to set `VAULT_ADDR` to point to the IP where the server is running.
  
  
  ---
  
  