Add ListUserPolicies and planned IAM actions to MinIO comparison

Add newly implemented ListUserPolicies, plus planned actions:
group inline policies, GetAccessKeyLastUsed, and user tagging.
Chris Lu committed 2026-04-08 12:35:26 -07:00
1 parent 4d74795dd2
commit 9b4b593559
1 file changed
+9
+9
@@ -110,6 +110,7 @@ For group management specifically, MinIO supports broadly similar administration
| `iam:PutUserPolicy` | ✅ | ❌ | MinIO has no inline policy concept |
| `iam:GetUserPolicy` | ✅ | ❌ | |
| `iam:DeleteUserPolicy` | ✅ | ❌ | |
| `iam:ListUserPolicies` | ✅ | ❌ | |
| `iam:AttachUserPolicy` | ✅ | ⚠️ Proprietary | MinIO: `mc admin policy attach` |
| `iam:DetachUserPolicy` | ✅ | ⚠️ Proprietary | MinIO: `mc admin policy detach` |
| `iam:ListAttachedUserPolicies` | ✅ | ⚠️ Proprietary | |
@@ -124,3 +125,11 @@ For group management specifically, MinIO supports broadly similar administration
| `iam:ListAttachedGroupPolicies` | ✅ | ⚠️ Proprietary | No dedicated MinIO API; exposed via group info / policy mapping queries |
| `iam:ListGroupsForUser` | ✅ | ⚠️ Proprietary | No dedicated MinIO API; returned as `MemberOf` in user info |
| `iam:UpdateGroup` | ✅ | ⚠️ Partial | SeaweedFS extension: rename or enable/disable. MinIO only supports enable/disable via `set-group-status` |
| `iam:PutGroupPolicy` | 📋 Planned | ❌ | Group inline policies; MinIO only supports managed policies |
| `iam:GetGroupPolicy` | 📋 Planned | ❌ | |
| `iam:DeleteGroupPolicy` | 📋 Planned | ❌ | |
| `iam:ListGroupPolicies` | 📋 Planned | ❌ | |
| `iam:GetAccessKeyLastUsed` | 📋 Planned | ❌ | Return when an access key was last used |
| `iam:TagUser` | 📋 Planned | ❌ | Add tags to a user |
| `iam:UntagUser` | 📋 Planned | ❌ | Remove tags from a user |
| `iam:ListUserTags` | 📋 Planned | ❌ | List tags on a user |