stado credentials grant add
Invocation
stado credentials grant add [OPTIONS] --host <HOST> --role <ROLE> --field <FIELD> --token-file <TOKEN_FILE> <CONSUMER>Purpose
Add to a consumer's grant the read of one field of the item that plays a role: by the role (`read:role:<role>#<field>`, what `credentials get --role --route` asks for) and by the item playing it now. --token-file is the consumer's bearer file on the host
Required inputs and options
| Input or option | Contract |
|---|---|
<CONSUMER> | Positional input; required or optional as shown in the invocation. |
--host <HOST> | Command option; required or optional as shown in the invocation. |
--role <ROLE> | Command option; required or optional as shown in the invocation. |
--field <FIELD> | Command option; required or optional as shown in the invocation. |
--token-file <TOKEN_FILE> | Command option; required or optional as shown in the invocation. |
--json | Command option; required or optional as shown in the invocation. |
Output and state effect
It performs the operation described above and emits its operator result on standard output or standard error. Any state change is limited to the resources and records named by the purpose and options on this page.
Refusals
- Before dispatch, Stado refuses a missing required token shown in the invocation, an unknown option, or a value outside a listed value set; argument-usage failures exit with code 2.