Documentation

mc admin accesskey

New in version MinIO: Client RELEASE.2024-10-08T09-37-26Z

These commands replace the MinIO IDP functionality of the mc admin user svcacct command and its subcommands.

Description

The mc admin accesskey command and its subcommands create and manage Access Keys for internally managed users on a MinIO deployment.

Each access key is linked to a user identity and inherits the policies attached to its parent user or those groups in which the parent user has membership. Each access key also supports an optional inline policy which further restricts access to a subset of actions and resources available to the parent user.

mc admin user svcacct only supports creating access keys for MinIO-managed accounts.

To create access keys for Active Directory/LDAP-managed accounts, use mc idp ldap accesskey and its subcommands. To manage access keys for OpenID Connect-managed users, log into the MinIO Console and generate the access keys through the UI.

mc admin accesskey command has the following subcommands:

Subcommand

Description

create

The mc admin accesskey create command adds a new access key and secret key pair for an existing MinIO user.

disable

The mc admin accesskey disable command disables an existing access key for a MinIO IDP user.

edit

The mc admin accesskey edit command modifies the configuration of an access key associated to the specified user.

enable

The mc admin accesskey enable command enables an existing access key.

info

The mc admin accesskey info command returns a description of the specified access key(s).

ls

The mc admin accesskey ls command lists users, access keys, or temporary security token service keys managed by the MinIO deployment.

rm

The mc admin accesskey rm command removes an access key associated to a user on the deployment.