Listing a role

You can list the roles in the specific path with the role list command.

With Ceph 8.0 release, the behavior of radosgw-admin role list has changed in relation to RGW (Rados Gateway) accounts. A simple radosgw-admin role list will not list the roles associated with RGW accounts. To list the roles for a specific RGW account, you must specify the account ID by running the following command:

radosgw-admin role list --account-id <RGWaccountID>

Prerequisites

A running IBM Storage Ceph cluster.
Installation of the Ceph Object Gateway.
Root-level access to a Ceph Object Gateway node.
An S3 bucket created.
A role created.
An S3 user created with user access.

Procedure

List the roles:

Syntax

radosgw-admin role list --role-name=ROLE_NAME [--path-prefix =PATH_PREFIX]

Example

[root@host01 ~]# radosgw-admin role list --role-name=S3Access1 --path-prefix="/application"

[
    {
        "RoleId": "85fb46dd-a88a-4233-96f5-4fb54f4353f7",
        "RoleName": "kvm-sts",
        "Path": "/application_abc/component_xyz/",
        "Arn": "arn:aws:iam:::role/application_abc/component_xyz/kvm-sts",
        "CreateDate": "2022-09-13T11:55:09.39Z",
        "MaxSessionDuration": 7200,
        "AssumeRolePolicyDocument": "{"Version":"2012-10-17","Statement":[{"Effect":"Allow","Principal":{"AWS":["arn:aws:iam:::user/kvm"]},"Action":["sts:AssumeRole"]}]}"
    },
    {
        "RoleId": "9116218d-4e85-4413-b28d-cdfafba24794",
        "RoleName": "kvm-sts-1",
        "Path": "/application_abc/component_xyz/",
        "Arn": "arn:aws:iam:::role/application_abc/component_xyz/kvm-sts-1",
        "CreateDate": "2022-09-16T00:05:57.483Z",
        "MaxSessionDuration": 3600,
        "AssumeRolePolicyDocument": "{"Version":"2012-10-17","Statement":[{"Effect":"Allow","Principal":{"AWS":["arn:aws:iam:::user/kvm"]},"Action":["sts:AssumeRole"]}]}"
    }
]