Charm Policies
The charm when authorised will be configure its Vault policies that will ensure that the charm can only access and is only allowed to do what is necessary.
These rules are defined in the charm_policy.hcl file.
It is worth to note that the paths starting with the charm- prefix are expected to be accessible by the charm, it is not recommended to have user managed resources on those paths.