Client calculation and sizing can be complex to compute when you have multiple namespaces and auth mounts. The Vault Client Usage dashboard in the Vault GUI provides the information where you can filter the data by namespace and/or auth mounts. You can also use Vault CLI or API to query the usage metrics. In the Vault Client Usage dashboard you can export the metrics data by clicking on the Export Activity data button.
However, you may wish to permit the viewing of the Client Usage Dashboard, however, due to company specific corporate policies, may wish to disable the ability to export the activity data.
Solution
By creating the necessary ACL policy and applying it to the Vault users who should be subject to this restriction, the button labeled "Export Activity Data" will not be visible in the GUI.
# Description: used to remove "Export Activity data" button from view in the Vault GUI.
path "sys/internal/counters/*" {
capabilities = ["read", "list"]
}
Without the policy restriction the Export Activity data button is visible and functional"
With the ACL policy restriction in place the Export Activity data button is no longer visible
Additional Resources
Vault Documentation: Client Usage
Vault Documentation: Export Metrics Data