- Adds note that `mc support proxy set|remove` no longer require registration - Adds info about stale ARNs for `mc replicate status` command - Additional information for --dry-run flag in `mc rm` - Thoroughly updates and restructures `mc admin policy` commands - Adds new `mc batch cancel` command - Updates deprecated commands for newly deprecated mc admin policy functions - Fixes toctree on mc admin page to allow for mc admin policy subcommand nesting Closes #766 Other fixes not part of the release: - Updates `--fake` flag on `mc rm` to `--dry-run` - Updates `--fake` flag on `mc mirror` to `--dry-run`
3.2 KiB
mc admin policy attach
minio
Table of Contents
mc admin policy attach
Syntax
Attaches one or more IAM policies to either a user or a group.
Exactly one ~mc admin policy attach --user
or one ~mc admin policy attach --group
is required.
EXAMPLE
The following command displays the current in-progress S3 API calls
on the alias
myminio
.
mc admin policy attach myminio readonly --user james
SYNTAX
The command has the following syntax:
mc admin policy attach \
TARGET \
POLICY \
[POLICY...] \
[--user USER | --group GROUP]
Parameters
The mc admin policy attach
command accepts the
following arguments:
TARGET
The alias <mc alias>
of a configured MinIO
deployment with the user or group for which you want to attach one or
more policies.
POLICY
The name of the policy to attach to either the user or the group.
You may attach multiple policies at once by separating each policy name with a space.
MinIO deployments include the following built-in policies <minio-policy-built-in>
by
default:
readonly
readwrite
diagnostics
writeonly
--user
The username of the identity you want to attach the policy or policies to. You may only list one user.
You must include either the --user
flag or the
--group
flag. You may not use the --user
flag
at the same time as the --group
flag.
--group
The name of the group identity you want to attach the policy or policies to. You may only list one group.
All users with membership in the group inherit the policies associated to the group.
You must include either the --group
flag or the
--user
flag. You may not use the --group
flag
at the same time as the --user
flag.
Global Flags
Examples
Attach the readonly
policy to user james
on
the deployment at alias myminio
.
mc admin policy attach myminio readonly --user james
Attach the audit-policy
and acct-policy
policies to group legal
on the deployment at alias
myminio
.
mc admin policy attach myminio audit-policy acct-policy --group legal