mc admin policy unset

Detaches a policy from a user or a group.

Syntax

CLI
mc admin policy unset TARGET POLICYNAME [ users=user1,user2 ] [ groups=group1,
group2 ] [ account=<account_name> ] [ domain=<domain_name> ] [ principalsaccount=<user/group
account> ]

POLICYNAME:
  Name of the policy to be detached.

users:
  List of users from which the policy must be detached.

groups:
  List of groups from which the policy must be detached.

account:
  Name of the account to which the policy belongs.

domain:
  Name of the domain to which the account belongs.

principalsaccount:
  Name of the account of the users or groups, if it is different from the policy's account.
  Currently, the only allowed value is 'default'.

FLAGS:
  --json                        enable JSON lines formatted output
  --debug                       enable debug output
  --insecure                    disable SSL certificate verification
  --help, -h                    show help

Parameters

Parameter Description
TARGET The alias of a configured HPE Ezmeral Object Store from which the command detaches the policy. This parameter is mandatory.
POLICYNAME The name of the policy to detach. This parameter is mandatory.
users Comma separated list of users from which the policy must be detached. Specify either a user or a group (using the groups parameter), or both.
groups Comma separated list of groups from which the policy must be detached. Specify either a user (using the users parameter) or a group or both.
account Name of the account whose policy is being detached.
domain Name of the domain to which account belongs.
principalsaccount Name of the account of the users or groups, if different from the policy's account. Currently, the allowed value for this is default.
json Enables JSON formatted output
debug Enables output for debugging
insecure Disables SSL verification
help Shows this help

Examples

  1. Detaches the listbuckets policy from users james and daniel on the Object Store deployment with alias salesobject:
    CLI
    /opt/mapr/bin/mc admin policy unset salesobject listbuckets users='james,daniel'
  2. Detaches the listbuckets policy from users james and daniel in account naphthara on the Object Store deployment with alias salesobject:
    CLI
    /opt/mapr/bin/mc admin policy unset salesobject listbuckets users='james,daniel' account='naphthara'