# mc idp ldap accesskey ls
LLMS index: [llms.txt](/llms.txt)
---
## Description {#description}
The [`mc idp ldap accesskey ls`](#command-mc.idp.ldap.accesskey.ls) displays a list of LDAP access key pairs.
[`mc idp ldap accesskey ls`](#command-mc.idp.ldap.accesskey.ls) is also known as [`mc idp ldap accesskey list`](#command-mc.idp.ldap.accesskey.list).
This command works against [access keys](/administration/identity-access-management/minio-user-management/#minio-id-access-keys) created by an AD/LDAP user after authenticating to MinIO.
Create AD/LDAP service accounts with the [`mc idp ldap accesskey create`](/reference/minio-mc/mc-idp-ldap-accesskey-create/#command-mc.idp.ldap.accesskey.create) command.
MinIO supports using [AssumeRoleWithLDAPIdentity](/developers/security-token-service/AssumeRoleWithLDAPIdentity/#minio-sts-assumerolewithldapidentity) to generate temporary access keys using the [Security Token Service](/developers/security-token-service/#minio-security-token-service).
**EXAMPLE**
> The following example returns a list of access keys associated with the authenticated user on the `minio` [alias](/reference/minio-mc/mc-alias-set/#alias):
```shell
mc idp ldap accesskey ls minio/
```
If the authenticated user has the `admin:ListUsers` permission, the example command returns a list of all users and their associated access keys.
**SYNTAX**
The command has the following syntax:
```shell
mc [GLOBALFLAGS] idp ldap accesskey ls \
ALIAS \
[--all] \
[--self] \
[--svcacc-only] \
[--temp-only] \
[--users-only] \
[DN] ...
```
- Replace `ALIAS` with the [alias](/reference/minio-mc/mc-alias-set/#alias) of a MinIO deployment configured for AD/LDAP integration.
- Replace `DN` with the string of a user’s [distinguished name](https://learn.microsoft.com/en-us/previous-versions/windows/desktop/ldap/distinguished-names). You may list multiple distinguished names by separating each with a space.
- Brackets `[]` indicate optional parameters.
- Parameters sharing a line are mutually dependent.
- Parameters separated using the pipe `|` operator are mutually exclusive.
Copy the example to a text editor and modify as-needed before running the command in the terminal/shell.
### Parameters {#parameters}
##### `ALIAS` {#mc.idp.ldap.accesskey.ls.ALIAS}
*mc-cmd*
*Required*
The [alias](/reference/minio-mc/mc-alias-set/#alias) of the MinIO deployment configured for AD/LDAP.
For example:
```text
mc idp ldap accesskey ls minio
```
##### `--all` {#mc.idp.ldap.accesskey.ls.-all}
*mc-cmd*
*Optional*
> [!NOTE]
> **Added: mc**
>
> RELEASE.2024-07-31T15-58-33Z
List all access keys for all LDAP users.
##### `--self` {#mc.idp.ldap.accesskey.ls.-self}
*mc-cmd*
*Optional*
> [!NOTE]
> **Added: mc**
>
> RELEASE.2024-07-31T15-58-33Z
List access keys for the currently authenticated user.
##### `--svcacc-only` {#mc.idp.ldap.accesskey.ls.-svcacc-only}
*mc-cmd*
*Optional*
Output only service account access keys.
Mutually exclusive with [`--temp-only`](#mc.idp.ldap.accesskey.ls.-temp-only).
##### `--temp-only` {#mc.idp.ldap.accesskey.ls.-temp-only}
*mc-cmd*
*Optional*
Output only temporary access keys.
Mutually exclusive with [`--svcacc-only`](#mc.idp.ldap.accesskey.ls.-svcacc-only).
##### `--users-only` {#mc.idp.ldap.accesskey.ls.-users-only}
*mc-cmd*
*Optional*
Output only the user distinguished names.
### Examples {#examples}
#### List All Access Keys {#list-all-access-keys}
To return a list of all access keys, you must first authenticate as the `admin` user. Once authenticated, the following command returns all AD/LDAP access keys on the `minio` deployment.
```shell
mc idp ldap accesskey ls minio
```
> [!NOTE]
> **Note**
>
> If the user does not have the `admin:ListUsers` permission, the command returns a list of access keys for the authenticated user only.
#### List User Distinguished Names {#list-user-distinguished-names}
To return a list of DNs for a deployment, you must first authenticate as a user with the `admin:ListUsers` permission. Once authenticated, the following command outputs the AD/LDAP distinguished names on the `minio` deployment.
```shell
mc idp ldap accesskey ls minio --users-only
```
#### List Temporary Access Keys {#list-temporary-access-keys}
To return a list of all temporary access keys for a deployment, you must first authenticate as a user with the `admin:ListUsers` permission. Once authenticated, the following command outputs a list of distinguished names with their associated temporary access keys.
```shell
mc idp ldap accesskey ls minio --temp-only
```
#### List a User’s Access Keys {#list-a-user-s-access-keys}
The following command returns the AD/LDAP access keys for the user `bobfisher` on the `minio` deployment.
```shell
mc idp ldap accesskey list minio/ uid=bobfisher,dc=min,dc=io
```
#### List Access Keys for Multiple Users {#list-access-keys-for-multiple-users}
The following command returns the AD/LDAP access keys for the users `bobfisher` and `cody3` on the `minio` deployment.
```shell
mc idp ldap accesskey list minio/ uid=bobfisher,dc=min,dc=io uid=cody3,dc=min,dc=io
```
#### List Access Keys for Authenticated User {#list-access-keys-for-authenticated-user}
The following command returns the AD/LDAP access keys for the currently authenticated user on the `minio` deployment.
```shell
mc idp ldap accesskey list minio/
```
> [!NOTE]
> **Note**
>
> If the authenticated user has the `admin:ListUsers` permission, the command returns a list of all users and access keys on the deployment.
### Global Flags {#global-flags}
This command supports any of the [global flags](/reference/minio-mc/#minio-mc-global-options).
## Behavior {#behavior}
### S3 Compatibility {#s3-compatibility}
SILO is the supported server for PGSTY mcli; compatibility with upstream MinIO and other S3 services is [best effort](/reference/minio-mc/#command-mc).