mc admin policy set

Sets a policy for a user or a group.

Syntax

CLI
mc admin policy set - set IAM policy on a user or group

USAGE:
  mc admin policy set TARGET POLICYNAME [ users=user1,user2 ] [ groups=group1,
group2 ] [ account=<account_name> ] [ domain=<domain_name> ] [ principalsaccount=<user/group
account> ]

POLICYNAME:
  Name of the policy on the MinIO server.

users:
  List of users to which the policy must be attached.

groups:
  List of Groups to which the policy must be attached.

account:
  Name of the account whose policy is being attached.

domain:
  Name of the domain to which the account belongs.

principalsaccount:
  Name of the account of the users or groups, if it is different from the policy's account.
  Currently, the allowed value for this is 'default'.

FLAGS:
  --json                        enable JSON lines formatted output
  --debug                       enable debug output
  --insecure                    disable SSL certificate verification
  --help, -h                    show help

Parameters

Parameter Description
TARGET The alias of a configured HPE Ezmeral Object Store on which the command sets the policy. This parameter is mandatory.
POLICYNAME The name of the policy to set. This parameter is mandatory.
users Comma separated list of users to which the policy must be set. Specify either a user or a group (using the groups parameter), or both.
groups Comma separated list of groups to which the policy must be set. Specify either a user (using the users parameter) or a group or both.
account Name of the account where the policy is created.
domain Name of the domain to which account belongs.
principalsaccount Name of the account of the users or groups, if different from the policy's account. Currently, the allowed value for this is default.
json Enables JSON formatted output
debug Enables output for debugging
insecure Disables SSL verification
help Shows this help

Examples

  1. Set the listbuckets policy for users james and daniel on the Object Store deployment with alias salesobject:
    CLI
    /opt/mapr/bin/mc admin policy set salesobject listbuckets users='james,daniel' -json
  2. Set the listbuckets policy for users james and daniel in account naphthara on the Object Store deployment with alias salesobject:
    CLI
    /opt/mapr/bin/mc admin policy set salesobject listbuckets users='james,daniel' account='naphthara' -json