# Manage group\_vars with vault?

**URL:** <https://forum.ansible.com/t/manage-group-vars-with-vault/15055>\
**Category:** Ansible Project\
**Created:** [April 20, 2014, 11:21am UTC](https://forum.ansible.com/t/manage-group-vars-with-vault/15055 "2014-04-20T11:21:40Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Aaron\_Hunter](https://avatars.discourse-cdn.com/v4/letter/a/e19adc/32.png) [@Aaron\_Hunter](https://forum.ansible.com/u/Aaron_Hunter)\
**Post date:** [April 20, 2014, 11:21am UTC](https://forum.ansible.com/t/manage-group-vars-with-vault/15055/1 "2014-04-20T11:21:40Z")

</div>

I’d like to manage a subset of group\_vars variables with vault. That is, split the variables “group\_vars/all” so that some are in plaintext and some are managed by vault. Is it possible for “group\_vars/all” to -include a vault managed file? I’d like to use the normal group\_vars mechanism but encrypt certain variables. I didn’t see how to do this type of include in the docs.

Thanks.

---

<div class="post-metadata">

**Author:** ![Michael\_DeHaan1](https://avatars.discourse-cdn.com/v4/letter/m/5e9695/32.png) [@Michael\_DeHaan1](https://forum.ansible.com/u/Michael_DeHaan1)\
**Post date:** [April 21, 2014, 1:13pm UTC](https://forum.ansible.com/t/manage-group-vars-with-vault/15055/2 "2014-04-21T13:13:42Z")

</div>

Group variables can’t “include” another group variables, but variables from all groups a host are loaded in are loaded.

So you can just make a host a member of a subgroup, and then “all” will get loaded and “subgroup” will overwrite the variables in all.