Ability to edit vaults for service accounts

Adding a use case. I run one service account per machine and use its token in several places. When I later need it to reach a second vault, the only option is to make a new service account, then swap the new token into every place that holds the old one. That turns a one-click change into a token migration.

I'd like to be able to edit vault access after creation: add or remove a vault and change permissions, with the token unchanged. Even add-only would cover most of my cases. If the restriction is a security choice, an audit-logged edit by an owner or admin would still keep it safe.

Hi ​@halldmatthew and ​@danielrosehill,

Thank you for sharing your feedback! I can certainly see how this would be useful, and have gone ahead and logged the feature request with our Product team for further consideration.