fugue user [global options] command [options]
Global options are detailed here.
- Show help text. The help flag is available throughout the CLI in both an application-level and command-level context. It enables a user to view help text for any command within the Fugue CLI.
user command allows you to assume a specified fugue
for issuing fugue commands. (This is only applicable for configurations
that include a
fugue user set [options] <user_id> <user_secret>
- The assumed user id for fugue commands.
- The assumed user secret for the specified user id.
- Specify the Fugue profile name where your Fugue
credentials are stored. [default:
- Suppress confirmation dialogs.
- Show help message and exit.
For detailed information on creating and managing users refer to How to Use RBAC in the Fugue User Guide.
Switching Fugue Users with the User Set Command¶
After creating any required users and policies for Fugue, you have the
ability to specify a Fugue user and execute commands as that Fugue user.
To switch between Fugue users you can execute the fugue
To confirm the list of users before selecting a target user, it may be helpful to view a list of users.
Note: In order to issue the fugue
user set command the target user
must be enabled.
$ fugue policy list-users Fugue User list for main-user/xxxxxxxxxxx - Tue Jan 24 2017 2:54pm User Name Enabled Created Updated ---------- --------- --------- --------- main-user yes 2:53pm 2:53pm root yes 2:39pm 2:39pm testuser no 2:53pm 2:53pm [ HELP ] To enable a user, run "fugue policy generate-secret <user_id>".
In addition, to verify which user may have been set, you can issue the
fugue -v status command for
--verbose output, including the
current user, displayed under
$ fugue -v status -------------------------------Configuration Info------------------------------- Fugue CLI Version: 1.36.4-1234-1f9samplesamplesample123456789 Conductor AMI: ami-7csample Configuration File Path (symbolic links followed): /Users/fugue/fugue.yaml Conductor Region: us-east-1 Compositions Bucket: default-9351234567-us-east-1 Request Queue: fugue-demarc-requests Response Table: fugue-cli-responses Fugue Profile: default-9351234567-us-east-1 Fugue User-Id: root Fugue Credentials file: /Users/main-user/credentials
To set a specified Fugue user, issue
fugue user set command
specifying both the
<user> and the
command modifies the contents of your credentials
file and assumes the use of the specified user credentials until you
fugue user set command to switch to another user.
The Fugue CLI will warn you that you’re going to replace the current user, ask you to confirm, verify the updates and provide a completion message.
For users who have configured Fugue through environment variables your environment typically does not include a
credentials file, and as a result the
fugue user set command has no file to modify. If the
fugue user set command is issued the CLI still responds with a success message but no actions will have been performed. Credentials will still need to be modified through the environment variable(s).
$ fugue user set main-user RandomGeneratedSecretUserString1234567891011 [ INFO ] This operation will overwrite profile 'default' in /Users/main-user/credentials [ WARN ] Are you sure you want to proceed? [y/N]: y [ DONE ] The user has been set to 'main-user'
If the target user is in another credentials profile, you can use the
--profile option to specify the profile name.
fugue user set --profile <profile> <user> <secret> will
switch to the user in the given profile, creating that profile if it
does not exist. If a fugue.yaml
file is present, the CLI will record the profile name in the
For example, the following command creates an
alice profile and
switches to the
fugue user set --profile alice alice oSedQchb1aXaibzLdW7xOJEXAMPLEEXAMPLEEXAMPLE=
credentials file might then look like this:
[default-123456789012-us-east-1] secret = E6a5iZ9jbxoWgGIid65i6zEXAMPLEEXAMPLEEXAMPLE= user = root [alice] secret = oSedQchb1aXaibzLdW7xOJEXAMPLEEXAMPLEEXAMPLE= user = alice
And if you have a
fugue.yaml file, it might look like this:
conductor: ami: ami-c4c3fcbe region: us-east-1 user: profile: alice
For more information, see Best Practices For Multiple Users.