Skip to main content
ONTAP commands

security login external-role-mapping show

Suggest changes
PDFs

Display the external role mapping

Availability: This command is available to cluster administrators at the admin privilege level.

Description

This command displays the configured mapping between an external IDP (Identity Provider) role and an ONTAP role.

Parameters

{ [-fields <fieldname>,…​]

If you specify the -fields <fieldname>, …​ parameter, the command output also includes the specified field or fields. You can use '-fields ?' to display the fields to specify.

| [-instance ] }

If you specify the -instance parameter, the command displays detailed information about all fields.

[-external-role <text>] - External Role Name

Selects the external role mapping associated with the name that matches this parameter value.

[-provider {basic|keycloak|auth0|adfs|entra}] - Provider Type

Selects the external role mapping associated with the provider that matches this parameter value.

[-ontap-role <text>] - Ontap Role Name

Selects the external role mapping associated with the ONTAP role that matches this parameter value.

[-comment <text>] - Comment

Selects the external role mapping associated with the comment that matches this parameter value.

[-created <MM/DD/YYYY HH:MM:SS>] - Create Timestamp

Selects the external role mapping associated with the created time that matches this parameter value.

Examples

The example below displays information about the external role mapping for the role 'Administrator' from the IDP 'entra'.

cluster1::> security login external-rolemapping show -external-role Testing -provider entra
External Role Name     Provider Type    Ontap Role Name       Comment
---------------------  ---------------  --------------------- ------------
Administrator          entra            Custom_role           -