stratumctl users

Manage IAM users

stratumctl users [flags]

Aliases: user

Subcommands

• stratumctl users create: Create a new user
• stratumctl users delete: Soft-delete a user
• stratumctl users get: Get a single user
• stratumctl users list: List users
• stratumctl users set-password: Rotate a user’s password
• stratumctl users update: Update a user’s display name, state or email
• stratumctl users whoami: Show the currently-authenticated user

stratumctl users create

Create a new user

stratumctl users create [flags]

Examples

stratumctl users create --email alice@example.com --display-name "Alice Liddell"
stratumctl users create --email bob@example.com --display-name "Bob" --password "$INITIAL_PASSWORD"

Flags

Flag	Type	Default	Description
--display-name	string		Display name (required)
--email	string		Email (required)
--password	string		Initial password (server generates one if empty)

stratumctl users delete

Soft-delete a user

stratumctl users delete <user-id> [flags]

Examples

stratumctl users delete u-alice

stratumctl users get

Get a single user

stratumctl users get <id> [flags]

Examples

stratumctl users get u-alice
stratumctl users get u-alice --output json

stratumctl users list

List users

stratumctl users list [flags]

Examples

stratumctl users list
stratumctl users list --output json

stratumctl users set-password

Rotate a user’s password

stratumctl users set-password <user-id> [flags]

Rotate the named user’s password.

The new password is read from –password, the STRATUM_NEW_PASSWORD env var, or (for tty stdin) prompted without echo. Same conventions as stratumctl login.

Examples

stratumctl users set-password u-alice
stratumctl users set-password u-alice --password "$NEW_PASSWORD"

Flags

Flag	Type	Default	Description
--password	string		New password (or set STRATUM_NEW_PASSWORD; or prompt)

stratumctl users update

Update a user’s display name, state or email

stratumctl users update <user-id> [flags]

Apply a sparse PATCH to a user.

Suspending a user (–state suspended) immediately revokes the user’s active sessions + PATs server-side. Reactivating them (–state active) restores login but does NOT restore the revoked tokens — the user must log in again.

Changing the email (–email, install admins only) keeps the user’s sessions and PATs; the next login uses the new address.

Examples

stratumctl users update u-alice --display-name "Alice L."
stratumctl users update u-alice --state suspended
stratumctl users update u-alice --email alice@new.example.com

Flags

Flag	Type	Default	Description
--display-name	string		New display name (omit to leave unchanged)
--email	string		New sign-in email (install admins only; omit to leave unchanged)
--state	string		New state: active|suspended (omit to leave unchanged)

stratumctl users whoami

Show the currently-authenticated user

stratumctl users whoami [flags]

Examples

stratumctl whoami
stratumctl whoami --output json