`juju grant`¶

See also: revoke, add-user, grant-cloud

Summary¶

Grants access level to a Juju user for a model, controller, or application offer.

juju grant [options] <user name> <permission> [<model name> ... | <offer url> ...]

Flag	Default	Usage
`-B`, `--no-browser-login`	false	Do not use web browser for authentication
`-c`, `--controller`		Controller to operate in

Grant user ‘joe’ ‘read’ access to model ‘mymodel’:

juju grant joe read mymodel

Grant user ‘jim’ ‘write’ access to model ‘mymodel’:

juju grant jim write mymodel

Grant user ‘sam’ ‘read’ access to models ‘model1’ and ‘model2’:

juju grant sam read model1 model2

Grant user ‘joe’ ‘read’ access to application offer ‘fred/prod.hosted-mysql’:

juju grant joe read fred/prod.hosted-mysql

Grant user ‘jim’ ‘consume’ access to application offer ‘fred/prod.hosted-mysql’:

juju grant jim consume fred/prod.hosted-mysql

Grant user ‘sam’ ‘read’ access to application offers ‘fred/prod.hosted-mysql’ and ‘mary/test.hosted-mysql’:

juju grant sam read fred/prod.hosted-mysql mary/test.hosted-mysql

By default, the controller is the current controller.

Users with read access are limited in what they can do with models: juju models, juju machines, and juju status

Valid access levels for models are: read write admin

Valid access levels for controllers are: login superuser

Valid access levels for application offers are: read consume admin