docs/source/reference/minio-mc-admin/mc-admin-user-add.rst

mc admin user add

minio

Table of Contents

mc admin user add

Syntax

The mc admin user add command adds a new MinIO user <minio-internal-idp> to the target MinIO deployment.

To manage external Identity Provider users, see OIDC <mc admin idp openid> or AD/LDAP <mc admin idp ldap>.

EXAMPLE

The following command creates a new user newuser on the myminio MinIO deployment:

mc admin user add myminio newuser newusersecret

SYNTAX

The command has the following syntax:

mc [GLOBALFLAGS] admin user add        \
                            ALIAS      \
                            ACCESSKEY  \
                            SECRETKEY

Parameters

ACCESSKEY

The access key that uniquely identifies the new user, similar to a username.

ALIAS

The alias <mc alias> of a configured MinIO deployment on which to create the new user.

SECRETKEY

The secret key for the new user. Consider the following guidance when creating a secret key:

• The key should be unique
• The key should be long (Greater than 12 characters)
• The key should be complex (A mixture of characters, numerals, and symbols)

Global Flags

Example

Create a New User

Use mc admin user add to create a user on a MinIO deployment:

mc admin user add ALIAS ACCESSKEY SECRETKEY

• Replace ALIAS <mc admin user add ALIAS> with the alias <mc alias> of the MinIO deployment.
• Replace ACCESSKEY <mc admin user add ACCESSKEY> with the access key for the user.
• Replace SECRETKEY <mc admin user add SECRETKEY> with the secret key for the user. MinIO does not provide any method for retrieving the secret key once set.

Specify a unique, random, and long string for both the ACCESSKEY and SECRETKEY. Your organization may have specific internal or regulatory requirements around generating values for use with access or secret keys.

Behavior

New Users Have No Default Policies

Newly created users have no policies by default and therefore cannot perform any operations on the MinIO deployment. To configure a user's assigned policies, you can do either or both of the following:

• Use mc admin policy attach to associate one or more policies to the user.
• Use mc admin group add to associate the user to the group. Users inherit any policies assigned to the group.

For more information on MinIO users and groups, see minio-users and minio-groups. For more information on MinIO policies, see MinIO Policy Based Access Control <minio-policy>.

S3 Compatibility