arctl user whoami

Displays the authenticated user’s identity and the roles claimed in their OIDC token. Each role is shown with its status:

configured - granted permissions via an AccessPolicy no permissions configured - role claimed in token; no AccessPolicy grants it

Superuser status overrides all role-based permission checks.

If the registry request fails, falls back to locally-decoded JWT claims.

Usage

arctl user whoami [flags]

Global flags

-h, --help: Display help information for the command.
--registry-token string: Registry bearer token (defaults to value of ARCTL_API_TOKEN env var).
--registry-url string: Registry URL (overrides ARCTL_API_BASE_URL env var; defaults to http://localhost:12121).