To verify your user credentials and permissions, use the command:
smctl healthcheck --user
Command output sample:
--------- User credentials ------
Status: Connected
Username: john.doe
Accounts: Example, Inc.
Authentication: 2FA
Environment: Unknown
Credentials:
Host: https://clientauth.one.digicert.com
API key: 01a007567da265b5909d11b8ea_b70xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxb9 (Pulled from environment variable)
Client certificate file path: C:\Users\John.Doe\Documents\STM\JohnD_Auth_Cert_2023.p12
Client certificate password: JM7QxxxxxxqO (Pulled from environment variable)
API keys:
Name: John API Token 2023 (expires on Fri, 31 Jan 2025 23:59:59 UTC)
Client certificates:
Name: John Auth Cert (expires on Tue, 31 Jan 2023 23:59:59 UTC)
Name: John Auth Cert 2023 (expires on Fri, 31 Jan 2025 23:59:59 UTC)
Privileges:
Can sign: Yes
Can approve release window: Yes
Can revoke certificate: Yes
Permissions:
Account Manager:
VIEW_AM_USER
VIEW_AM_ORGANIZATION
MANAGE_AM_PERMISSION
VIEW_AM_ROLE
VIEW_AM_ACCOUNT
VIEW_AM_AUDIT_LOG
Keypairs:
APPROVE_SM_KEYPAIR_DELETE
GENERATE_SM_KEYPAIR
MANAGE_SM_KEYPAIR
REQUEST_SM_KEYPAIR_EXPORT
EXPORT_SM_KEYPAIR
APPROVE_SM_KEYPAIR_EXPORT
IMPORT_SM_KEYPAIR
SIGN_SM_HASH
MANAGE_SM_MASTER_KEYPAIR
VIEW_SM_KEYPAIR
Certificates:
MANAGE_SM_CERTIFICATE_PROFILE
GENERATE_SM_CERTIFICATE
IMPORT_SM_CERTIFICATE
VIEW_SM_CERTIFICATE
VIEW_SM_CERTIFICATE_TEMPLATE
VIEW_SM_CERTIFICATE_PROFILE
REVOKE_SM_CERTIFICATE
Releases:
APPROVE_SM_RELEASE_WINDOW
REQUEST_SM_RELEASE_WINDOW
VIEW_SM_RELEASE_WINDOW
Audit logs:
VIEW_SM_AUDIT_LOG
EXPORT_SM_LOGS
Other permissions:
MANAGE_SM_CC_API_KEY
VIEW_SM_LICENSE
MANAGE_SM_HIERARCHY
MANAGE_SM_ACCOUNT_SETTINGS