configpolicy/roles/promtail/templates/capabilities.conf.j2

[Service]
{% if promtail_dac_read_search %}
AmbientCapabilities=CAP_DAC_READ_SEARCH
{% endif %}