1---
2layout: docs
3page_title: Vault Enterprise Lease Count Quotas
4description: |-
5  Vault Enterprise features a mechanism to create lease count quotas.
6---
7
8# Lease Count Quotas
9
10Vault features an extension to resource quotas that allows operators to enforce
11limits on how many leases are created. For a given lease count quota, if the
12number of leases in the cluster hits the configured limit, `max_leases`, additional
13lease creations will be forbidden for all clients until a lease has been revoked
14or has expired.
15
16All the nodes in the Vault cluster will share the lease quota rules, meaning that
17the lease counters will be shared, regardless of which node in the Vault cluster
18receives lease generation requests. Lease quotas can be imposed across Vault's API,
19or scoped down to API pertaining to specific namespaces or specific mounts.
20
21Lease count quotas defined in a namespace will be inherited by all the child
22namespaces. By extension, this means that a quota that is defined in the `root`
23namespace is inherited by all namespaces and mounts, essentially to the entire
24Vault API.
25
26Lease count quotas defined on a namespace will take precedence over the inherited
27quotas. Lease count quotas defined for a mount will take precedence over inherited
28and namespace quotas. The limits on the namespace and mount quotas can either be
29increased or decreased. If the inherited quota is very restrictive and if it is
30desired to relax the limits in one namespace, or on a specific mount, it can be
31done using this precedence model. On the other hand, if the inherited quota is
32very liberal and if it is desired to further restrict usages in a specific
33namespace or mount, that can be done using the precedence model too.
34
35Vault also allows the inspection into the state of lease count quotas in a Vault
36cluster through various [metrics](/docs/internals/telemetry#Resource-Quota-Metrics)
37exposed and through enabling optional audit logging.
38
39## Learn
40
41Refer to [Protecting Vault with Resource
42Quotas](https://learn.hashicorp.com/vault/security/resource-quotas) for a
43step-by-step tutorial.
44
45## API
46
47Lease count quotas can be managed over the HTTP API. Please see
48[Lease Count Quotas API](/api/system/lease-count-quotas) for more details.
49