mirror of
https://github.com/ovh/the-bastion.git
synced 2025-01-10 01:15:15 +08:00
63 lines
1.6 KiB
ReStructuredText
63 lines
1.6 KiB
ReStructuredText
|
====================
|
||
|
|
groupDelGuestAccess
|
||
|
|
====================
|
||
|
|
|
||
|
|
Remove a specific group server access from an account
|
||
|
|
=====================================================
|
||
|
|
|
||
|
|
|
||
|
|
.. admonition:: usage
|
||
|
|
:class: cmdusage
|
||
|
|
|
||
|
|
--osh groupDelGuestAccess --group GROUP --account ACCOUNT [OPTIONS]
|
||
|
|
|
||
|
|
.. program:: groupDelGuestAccess
|
||
|
|
|
||
|
|
|
||
|
|
.. option:: --group GROUP
|
||
|
|
|
||
|
|
group to remove guest access from
|
||
|
|
|
||
|
|
--account ACCOUNT name of the other bastion account to remove access from
|
||
|
|
.. option:: --host HOST|IP
|
||
|
|
|
||
|
|
remove access from this HOST (which must belong to the GROUP)
|
||
|
|
|
||
|
|
.. option:: --user USER
|
||
|
|
|
||
|
|
allow connecting to HOST only with remote login USER
|
||
|
|
|
||
|
|
.. option:: --user-any
|
||
|
|
|
||
|
|
allow connecting to HOST with any remote login
|
||
|
|
|
||
|
|
.. option:: --port PORT
|
||
|
|
|
||
|
|
allow connecting to HOST only to remote port PORT
|
||
|
|
|
||
|
|
.. option:: --port-any
|
||
|
|
|
||
|
|
allow connecting to HOST with any remote port
|
||
|
|
|
||
|
|
.. option:: --scpup
|
||
|
|
|
||
|
|
allow SCP upload, you--bastion-->server (omit --user in this case)
|
||
|
|
|
||
|
|
.. option:: --scpdown
|
||
|
|
|
||
|
|
allow SCP download, you<--bastion--server (omit --user in this case)
|
||
|
|
|
||
|
|
|
||
|
|
This command removes, from an existing bastion account, access to a given server, using the
|
||
|
|
egress keys of the group. The list of such servers is given by ``groupListGuestAccesses``
|
||
|
|
|
||
|
|
If you want to remove member access from an account to all the present and future servers
|
||
|
|
of the group, using the group key, please use ``groupDelMember`` instead.
|
||
|
|
|
||
|
|
If you want to remove access from an account from a group server but using his personal bastion
|
||
|
|
key instead of the group key, please use ``accountDelPersonalAccess`` instead.
|
||
|
|
|
||
|
|
This command is the opposite of ``groupAddGuestAccess``.
|
||
|
|
|
||
|
|
|