mc admin policy entities

Lists the entities associated with a policy, user, or group on a target MinIO AIStor deployment.

This command only returns minio-managed users and groups.

To list entities associated with an Active Directory or LDAP (AD/LDAP) configuration, use mc idp ldap policy entities.

For example, you can list all of the users and groups attached to a policy or list all of the policies attached to a specific user or group.

Syntax

Parameters

The mc admin policy entities command accepts the following arguments:

TARGET

Required

The alias of a configured MinIO AIStor deployment.

--group

Alias: -g

Optional

Returns the users and policies associated with the specified group. Repeat the flag to return results for multiple groups.

--policy

Alias: -p

Optional

Returns the users and groups associated with the specified policy. Repeat the flag to return results for multiple policies.

--user

Alias: -u

Optional

Returns the policies associated with the specified user. Repeat the flag to return results for multiple users.

Global Flags

This command supports any of the global flags.

Examples

List the entities for every policy

Omit the flags to cover all policies:

mc admin policy entities myaistor

List the entities for specific policies

mc admin policy entities myaistor --policy finteam-policy --policy mlteam-policy

List the policies for specific users

mc admin policy entities myaistor --user bob --user james

Combine the filters

mc admin policy entities myaistor                \
                         --policy finteam-policy \
                         --user bobfisher        \
                         --group consulting