You must grant the following ECL permissions to Vault Cache users:
Access to current database
Access to environment variables
Ability to read other databases
Ability to modify other databases
Access to external code