Policies are how authorization is done in Vault, allowing you to restrict which parts of Vault a user can access.