stratumctl role-bindings

Manage IAM role bindings

stratumctl role-bindings [flags]

Aliases: rb, rolebinding, rolebindings

Subcommands

• stratumctl role-bindings grant: Grant a role to a user at a scope
• stratumctl role-bindings list: List role bindings for a user
• stratumctl role-bindings revoke: Revoke a role binding from a user

stratumctl role-bindings grant

Grant a role to a user at a scope

stratumctl role-bindings grant --user <id> --role <role> --scope <type>:<id> [flags]

Grant a role to a user. –scope is “<type>:<id>” — type is one of install, organization, project. Examples:

stratumctl role-bindings grant --user u-AAA --role project-admin --scope project:p-BBB
stratumctl role-bindings grant --user u-AAA --role org-owner --scope organization:o-CCC

Flags

Flag	Type	Default	Description
--role	string		Role name (required; e.g. project-admin)
--scope	string		Scope as <type>:<id> (required)
--user	string		User ID to grant the role to (required)

stratumctl role-bindings list

List role bindings for a user

stratumctl role-bindings list --user <id> [flags]

Examples

stratumctl role-bindings list --user u-alice
stratumctl role-bindings list --user u-alice --output json

Flags

Flag	Type	Default	Description
--user	string		User ID (required)

stratumctl role-bindings revoke

Revoke a role binding from a user

stratumctl role-bindings revoke <role-binding-id> --user <user-id> [flags]

Examples

stratumctl role-bindings revoke rb-7k2m9x4q8a --user u-alice

Flags

Flag	Type	Default	Description
--user	string		User ID the binding belongs to (required)