fugue user [global options] command [options]


Set the fugue user. All subsequent commands will be executed as this user.


Global options are detailed here.

-h | --help
Show help text. The help flag is available throughout the CLI in both an application-level and command-level context. It enables a user to view help text for any command within the Fugue CLI.


The user command allows you to assume a specified fugue <user> for issuing fugue commands. (This is only applicable for configurations that include a credentials file).

User Subcommands



fugue user set [options] <user_id> <user_secret>


The assumed user id for fugue commands.
The assumed user secret for the specified user id.


-p | --profile name
Specify the Fugue profile name where your Fugue credentials are stored. [default: default-<account-id>-<region> ]
-y | --yes
Suppress confirmation dialogs.
-h | --help
Show help message and exit.


Set the Fugue user. All subsequent commands will be executed as this user.


For detailed information on creating and managing users refer to How to Use RBAC in the Fugue User Guide.

Switching Fugue Users with the User Set Command

After creating any required users and policies for Fugue, you have the ability to specify a Fugue user and execute commands as that Fugue user. To switch between Fugue users you can execute the fugue user set command.

To confirm the list of users before selecting a target user, it may be helpful to view a list of users.

Note: In order to issue the fugue user set command the target user must be enabled.

$ fugue policy list-users

Fugue User list for main-user/xxxxxxxxxxx - Tue Jan 24 2017 2:54pm

User Name     Enabled    Created    Updated
----------    ---------  ---------  ---------
main-user     yes        2:53pm     2:53pm
root          yes        2:39pm     2:39pm
testuser      no         2:53pm     2:53pm

[ HELP ] To enable a user, run "fugue policy generate-secret <user_id>".

In addition, to verify which user may have been set, you can issue the fugue -v status command for --verbose output, including the current user, displayed under Fugue User-Id.

$ fugue -v status
-------------------------------Configuration Info-------------------------------
Fugue CLI Version: 1.36.4-1234-1f9samplesamplesample123456789
Conductor AMI: ami-7csample
Configuration File Path (symbolic links followed): /Users/fugue/fugue.yaml
Conductor Region: us-east-1
Compositions Bucket: default-9351234567-us-east-1
Request Queue: fugue-demarc-requests
Response Table: fugue-cli-responses
Fugue Profile: default-9351234567-us-east-1
Fugue User-Id: root
Fugue Credentials file: /Users/main-user/credentials

To set a specified Fugue user, issue fugue user set command specifying both the <user> and the <secret>. The user set command modifies the contents of your credentials file and assumes the use of the specified user credentials until you issue the fugue user set command to switch to another user.

The Fugue CLI will warn you that you’re going to replace the current user, ask you to confirm, verify the updates and provide a completion message.


For users who have configured Fugue through environment variables your environment typically does not include a credentials file, and as a result the fugue user set command has no file to modify. If the fugue user set command is issued the CLI still responds with a success message but no actions will have been performed. Credentials will still need to be modified through the environment variable(s).


Do not lose your root credentials. They cannot be replaced with the policy generate-secret command. If you have lost your root credentials, see the reset-secret command or contact

$ fugue user set main-user RandomGeneratedSecretUserString1234567891011
[ INFO ] This operation will overwrite profile 'default' in /Users/main-user/credentials

[ WARN ] Are you sure you want to proceed? [y/N]: y

[ DONE ] The user has been set to 'main-user'

If the target user is in another credentials profile, you can use the -p or --profile option to specify the profile name.

Executing fugue user set --profile <profile> <user> <secret> will switch to the user in the given profile, creating that profile if it does not exist. If a fugue.yaml file is present, the CLI will record the profile name in the profile field.

For example, the following command creates an alice profile and switches to the alice user:

fugue user set --profile alice alice oSedQchb1aXaibzLdW7xOJEXAMPLEEXAMPLEEXAMPLE=

The credentials file might then look like this:

secret = E6a5iZ9jbxoWgGIid65i6zEXAMPLEEXAMPLEEXAMPLE=
user = root

user = alice

And if you have a fugue.yaml file, it might look like this:

  ami: ami-c4c3fcbe
  region: us-east-1
  profile: alice

For more information, see Best Practices For Multiple Users.