alpacon token acl
Configure fine-grained access control for API tokens. Three independent ACL types enforce deny-by-default access:
| Type | Controls | Applied when |
|---|---|---|
command | Which shell commands can be executed | alpacon exec and non-interactive alpacon websh |
server | Which servers can be accessed | Any websh, exec, or cp operation targeting that server |
file | Which file paths can be read/written | alpacon cp |
If no ACL rule exists for a given type, that access is denied entirely.
Note
Command ACLs apply to alpacon exec and non-interactive alpacon websh SERVER "command". Interactive alpacon websh SERVER sessions are not restricted by command ACLs.
alpacon token acl [flags]
alpacon token acl [command]Options
-h, --help help for acl