`mc admin policy`

Changed in version mc: RELEASE.2023-03-20T17-17-53Z

The following commands are deprecated:

mc admin policy add use mc admin policy create instead
mc admin policy set use mc admin policy attach instead
mc admin policy unset use mc admin policy detach instead
mc admin policy update use attach or detach instead

The following command is added:

mc admin policy entities

Description

The mc admin policy commands manage policies for use with MinIO Policy-Based Access Control (PBAC). MinIO PBAC uses IAM-compatible policy JSON documents to define rules for accessing resources on a MinIO server.

For complete documentation on MinIO PBAC, including policy document JSON structure and syntax, see Access Management. To manage policies for deployments that use LDAP authentication, see mc idp ldap policy.

Subcommands

mc admin policy includes the following subcommands:

Subcommand	Description
`attach`	Attaches one or more IAM policies to either a MinIO-managed user or a group.
`create`	Creates a new policy on the target MinIO deployment.
`detach`	Remove one or more IAM policies from either a MinIO-managed user or a group.
`entities`	List the entities associated with a policy, user, or group on a target MinIO deployment.
`info`	Returns the specified policy in JSON format if it exists on the target MinIO deployment.
`ls`	Lists all policies on the target MinIO deployment.
`rm`	Removes an IAM policy from the target MinIO deployment.