stratumctl custom-roles

Manage custom Cedar roles

stratumctl custom-roles [flags]

Aliases: custom-role, crole

Subcommands

• stratumctl custom-roles create: Create a custom role from a statements file
• stratumctl custom-roles delete: Delete a custom role (–force cascades live bindings)
• stratumctl custom-roles get: Show a custom role (includes generated Cedar)
• stratumctl custom-roles list: List custom roles

stratumctl custom-roles create

Create a custom role from a statements file

stratumctl custom-roles create --name <n> --scope-type <organization|project> -f <statements.json> [flags]

Examples

stratumctl custom-roles create --name instance-operator --scope-type project -f statements.json
stratumctl custom-roles create --name instance-operator --scope-type organization --description "Start and stop instances" -f statements.json

Flags

Flag	Type	Default	Description
--description	string		description
-f, --file	string		JSON statements array file (‘-’ = stdin)
--name	string		role name (required)
--scope-type	string		organization | project (required)

stratumctl custom-roles delete

Delete a custom role (–force cascades live bindings)

stratumctl custom-roles delete <name> [--force] [flags]

Examples

stratumctl custom-roles delete instance-operator
stratumctl custom-roles delete instance-operator --force

Flags

Flag	Type	Default	Description
--force	bool	false	cascade-delete live bindings

stratumctl custom-roles get

Show a custom role (includes generated Cedar)

stratumctl custom-roles get <name> [flags]

Examples

stratumctl custom-roles get instance-operator
stratumctl custom-roles get instance-operator --output json

stratumctl custom-roles list

List custom roles

stratumctl custom-roles list [flags]

Examples

stratumctl custom-roles list
stratumctl custom-roles list --output json