diff --git a/services/vault/scripts/vault_k8s_auth_configure.sh b/services/vault/scripts/vault_k8s_auth_configure.sh
index 0e956775d..58f2a2155 100644
--- a/services/vault/scripts/vault_k8s_auth_configure.sh
+++ b/services/vault/scripts/vault_k8s_auth_configure.sh
@@ -158,6 +158,12 @@ path "sys/mounts" {
 path "sys/mounts/auth/*" {
   capabilities = ["read", "update", "sudo"]
 }
+path "sys/storage/raft/configuration" {
+  capabilities = ["read"]
+}
+path "sys/storage/raft/snapshot" {
+  capabilities = ["read"]
+}
 path "kv/data/atlas/vault/*" {
   capabilities = ["read"]
 }