Description The mc admin group command manages groups on an AIStor deployment. A group is a collection of users. Each group can have one or more assigned policies that explicitly list the actions and resources to which group members are allowed or denied access. Groups provide a simplified method for managing shared permissions among users with common access patterns and workloads.

The mc admin cluster iam export command exports IAM metadata for use with the mc admin cluster iam import command. The command saves the output as ALIAS-iam-metadata.zip, where ALIAS is the alias of the AIStor deployment. Syntax Example The following command exports all IAM metadata for the myaistor deployment.

Description The mc admin policy commands manage policies for use with MinIO Policy-Based Access Control (PBAC). MinIO PBAC uses IAM-compatible policy JSON documents to define rules for accessing resources on an AIStor server. For complete documentation on MinIO PBAC, including policy document JSON structure and syntax, see Access Management. To manage policies for deployments that use LDAP authentication, see mc idp ldap policy.

The mc admin scanner trace command displays scanner-specific API operations occurring on the target AIStor deployment. Syntax Example The following example returns a list of API operations related to the scanner on the myaistor deployment.

The mc admin user command and its subcommands manage AIStor users. Clients must authenticate to the AIStor deployment with the access key and secret key associated to a user on the deployment. AIStor users constitute a key component in AIStor Identity and Access Management. To manage users who authenticate using a third-party IDP, use the command for the appropriate provider: For AD/LDAP, use mc idp ldap For OpenID Connect (OIDC) compatible providers, use mc idp openid Subcommands mc admin user includes the following subcommands:

Description The mc alias commands provide a convenient interface for managing the list of S3-compatible hosts that mc can connect to and run operations against. Subcommands mc alias includes the following subcommands:

Syntax Example The following command applies the JSON-formatted anonymous policy to the mydata bucket on the myaistor AIStor deployment: mc anonymous set-json ~/mydata-anonymous.json myaistor/mydata Syntax The command has the following syntax:

Returns the specified policy in JSON format if it exists on the target AIStor deployment. Syntax Example The following command returns the policy readonly in JSON format from the deployment at alias myaistor.

Attaches one or more IAM policies to either an AIStor-managed user or a group. Exactly one --user or one --group is required. This command is intended for managing policy associations for MinIO-managed users only. For attaching policies to OpenID-managed users, see OpenID Connect Access Management.

The mc cors remove command removes the Cross-Origin Resource Sharing (CORS) configuration from a bucket. CORS is a browser security mechanism that controls which web domains can access your object storage from client-side JavaScript. When a web application running on one domain attempts to access objects in AIStor from a different domain, the browser checks CORS policies to determine if the request should be allowed. See the Mozilla CORS documentation for more information.