LinuxCommandLibrary

ibmcloud-iam

Manage IBM Cloud IAM resources

TLDR

List service IDs in an account

$ ibmcloud iam service-ids
copy

List all API keys for a service ID
$ ibmcloud iam service-api-keys [service_id]
copy

Create an API key for a service ID with a description and without confirmation
$ ibmcloud iam service-api-key-create [api_key_name] [service_id] [[-d|--description]] [description] [[-f|--force]]
copy

List all actions available under this command
$ ibmcloud iam help
copy

SYNOPSIS

ibmcloud iam [-h, --help] [subcommand] [flags]

PARAMETERS

-h, --help
    Show help for iam command

--debug
    Enable debug logging

--trace
    Trace all network requests

--output, -o string
    Specify output format: json, yaml, or table (default table)

--jsonpath string
    JSONPath to extract from JSON output

--no-color
    Disable colored output

DESCRIPTION

The ibmcloud iam command, part of the IBM Cloud CLI, provides a powerful interface for managing Identity and Access Management (IAM) on IBM Cloud.

It supports operations on entities like API keys, service IDs, users, groups, roles, policies, access groups, and certificates. Users can create, list, update, or delete these resources, assign roles, generate policy templates, and handle invitations.

Ideal for DevOps automation, compliance scripting, and secure access provisioning. Requires IBM Cloud CLI installation and authentication via ibmcloud login. Supports JSON/JSONPATH/YAML output formats for parsing in scripts.

Enhances security by enabling fine-grained access control without UI dependency.

CAVEATS

Requires IBM Cloud CLI v0.30+ and IAM plugin installed via ibmcloud plugin install iam. Needs account API key or login. Rate limits apply to API calls. Subcommands have entity-specific flags not listed here.

COMMON SUBCOMMANDS

api-key-create: Create API key.
policy-create: Create access policy.
service-id-create: Create service ID.
Use ibmcloud iam <entity> --help for details.

INSTALLATION

Install plugin: ibmcloud plugin install iam or download ibmcloud-iam binary from IBM GitHub releases.

HISTORY

Evolved from Bluemix CLI (bx) in 2017; renamed to ibmcloud-cli in 2018. IAM plugin added for v2 IAM support post-2019 migration from CF IAM. Actively maintained with quarterly updates aligning to IBM Cloud IAM API v1.

SEE ALSO

ibmcloud(1), bx(1)

Copied to clipboard