mc admin accesskey
Description
The mc admin accesskey command and its subcommands create and manage Access Keys for internally managed users on a MinIO AIStor deployment.
Each access key is linked to a user identity and inherits the policies attached to its parent user or those groups in which the parent user has membership. Each access key also supports an optional inline policy which further restricts access to a subset of actions and resources available to the parent user.
To create access keys for Active Directory/LDAP-managed accounts, use mc idp ldap accesskey and its subcommands.
To manage access keys for OpenID Connect-managed users, use mc idp openid accesskey and its subcommands, or log into the Console UI.
Subcommands
mc admin accesskey command has the following subcommands:
| Subcommand | Description |
|---|---|
create | The mc admin accesskey create command adds a new access key and secret key pair for an existing MinIO AIStor user. |
disable | The mc admin accesskey disable command disables an existing access key for a MinIO IDP user. |
edit | The mc admin accesskey edit command modifies the configuration of an access key associated to the specified user. |
enable | The mc admin accesskey enable command enables an existing access key. |
info | The mc admin accesskey info command returns a description of the specified access key(s). |
ls | The mc admin accesskey ls command lists users, access keys, or temporary security token service keys managed by the deployment. |
rm | The mc admin accesskey rm command removes an access key associated to a user on the deployment. |
sts-revoke | The mc admin accesskey sts-revoke command revokes access to sts accounts created by the requesting user, including service accounts. |
diagnose | The mc admin accesskey diagnose command reports why a service account is denied access. |