The mc admin cluster iam export command exports IAM metadata for use with the mc admin cluster iam import command. The command saves the output as ALIAS-iam-metadata.zip, where ALIAS is the alias of the AIStor deployment. Syntax Example The following command exports all IAM metadata for the myaistor deployment.

Required release version This command is available in AIStor Client RELEASE.2025-03-31T22-38-30Z or later. The functionality requires AIStor RELEASE.2025-03-27T23-09-45Z or later. The mc admin accesskey sts-revoke command removes security token service (sts) credentials associated with an account. Revoke all STS tokens for an account, or specify the type(s) of STS tokens to revoke for an account.

The mc diff mc computes the differences between two filesystem directories or AIStor buckets. mc diff lists only those objects which are missing or which differ in size. mc diff does not compare the contents of objects. Syntax Example The following command computes the difference between the contents in the mydata folder on a local filesystem and the contents in the mydata bucket on the myaistor AIStor deployment:

The mc idp ldap ls command lists all AD/LDAP configurations for an AIStor deployment. Syntax Example The following example lists all AD/LDAP configurations for the myaistor deployment.

The mc idp openid add command creates an OIDC IDP server configuration. You can run the command multiple times to set up multiple OpenID providers. When adding multiple OpenID providers, only one can be a JWT claim-based provider. All others must be role-based providers. Example and syntax Example The following example creates the configuration settings for the myaistor deployment as defined in a new test-config setup for Dex integration.

Description The mc alias commands provide a convenient interface for managing the list of S3-compatible hosts that mc can connect to and run operations against. Subcommands mc alias includes the following subcommands:

The mc admin user add command adds a new AIStor user to the target AIStor deployment. To manage external Identity Provider users, see OIDC or AD/LDAP. Syntax Example The following command creates a new user newuser on the myaistor AIStor deployment:

Returns the specified policy in JSON format if it exists on the target AIStor deployment. Syntax Example The following command returns the policy readonly in JSON format from the deployment at alias myaistor.

Prints Prometheus metrics for a cluster. The output includes additional information about each metric, such as if its value is a counter or gauge. Syntax Example The following command prints v3 Prometheus metrics for the deployment at alias myaistor:

The mc admin user command and its subcommands manage AIStor users. Clients must authenticate to the AIStor deployment with the access key and secret key associated to a user on the deployment. AIStor users constitute a key component in AIStor Identity and Access Management. To manage users who authenticate using a third-party IDP, use the command for the appropriate provider: For AD/LDAP, use mc idp ldap For OpenID Connect (OIDC) compatible providers, use mc idp openid Subcommands mc admin user includes the following subcommands: