diff --git a/builtin/logical/consul/path_roles.go b/builtin/logical/consul/path_roles.go
index 48ce3c3fb..fa513b501 100644
--- a/builtin/logical/consul/path_roles.go
+++ b/builtin/logical/consul/path_roles.go
@@ -35,6 +35,7 @@ func pathRoles(b *backend) *framework.Path {
 				Type: framework.TypeString,
 				Description: `Policy document, base64 encoded. Required
 for 'client' tokens. Required for Consul pre-1.4.`,
+				Deprecated: true,
 			},
 
 			"token_type": {
@@ -43,6 +44,7 @@ for 'client' tokens. Required for Consul pre-1.4.`,
 				Description: `Which type of token to create: 'client' or 'management'. If
 a 'management' token, the "policy", "policies", and "consul_roles" parameters are not
 required. Defaults to 'client'.`,
+				Deprecated: true,
 			},
 
 			"policies": {
diff --git a/changelog/15550.txt b/changelog/15550.txt
new file mode 100644
index 000000000..6579b89ac
--- /dev/null
+++ b/changelog/15550.txt
@@ -0,0 +1,3 @@
+```release-note:deprecation
+secrets/consul: Deprecate old parameters "token_type" and "policy"
+```
\ No newline at end of file