<!-- WARNING: This documentation is auto-generated from the confluentinc/cli repository and should not be manually edited. -->

<a id="confluent-iam-rbac-role-binding-list"></a>

# confluent iam rbac role-binding list

## Description

List role bindings assigned to a principal based on scopes.

```none
confluent iam rbac role-binding list [flags]
```

## Flags

### Cloud

```none
    --principal string                 Principal ID, which limits role bindings to this principal. If unspecified, list all principals and role bindings.
    --current-user                     List role bindings assigned to the current user.
    --role string                      Predefined role assigned to "--principal". If "--principal" is unspecified, list all principals assigned the role.
    --environment string               Environment ID, which specifies the environment scope.
    --current-environment              Use current environment ID for the environment scope.
    --cloud-cluster string             Cloud cluster ID, which specifies the cloud cluster scope.
    --kafka-cluster string             Kafka cluster ID, which specifies the Kafka cluster scope.
    --schema-registry-cluster string   Schema Registry cluster ID, which specifies the Schema Registry cluster scope.
    --ksql-cluster string              ksqlDB cluster name, which specifies the ksqlDB cluster scope.
    --flink-region string              Flink region for the role binding, formatted as "cloud.region".
    --resource string                  Resource type and identifier using "Prefix:ID" format. If specified with "--role" and no principals, list all principals and role bindings.
    --inclusive                        List role bindings for specified scopes and nested scopes. Otherwise, list role bindings for the specified scopes. If scopes are unspecified, list only organization-scoped role bindings.
-o, --output string                    Specify the output format as "human", "json", or "yaml". (default "human")
```

### On-Premises

```none
    --principal string                 Principal ID, which limits role bindings to this principal. If unspecified, list all principals and role bindings.
    --current-user                     List role bindings assigned to the current user.
    --role string                      Predefined role assigned to "--principal". If "--principal" is unspecified, list all principals assigned the role.
    --kafka-cluster string             Kafka cluster ID, which specifies the Kafka cluster scope.
    --schema-registry-cluster string   Schema Registry cluster ID, which specifies the Schema Registry cluster scope.
    --ksql-cluster string              ksqlDB cluster ID, which specifies the ksqlDB cluster scope.
    --connect-cluster string           Kafka Connect cluster ID, which specifies the Connect cluster scope.
    --cmf string                       Confluent Managed Flink (CMF) ID, which specifies the CMF scope.
    --flink-environment string         Flink environment ID, which specifies the Flink environment scope.
    --client-cert-path string          Path to client cert to be verified by MDS. Include for mTLS authentication.
    --client-key-path string           Path to client private key, include for mTLS authentication.
    --context string                   CLI context name.
    --cluster-name string              Cluster name, which specifies the cluster scope.
    --resource string                  Resource type and identifier using "Prefix:ID" format. If specified with "--role" and no principals, list all principals and role bindings.
    --inclusive                        List role bindings for specified scopes and nested scopes. Otherwise, list role bindings for the specified scopes. If scopes are unspecified, list only organization-scoped role bindings.
-o, --output string                    Specify the output format as "human", "json", or "yaml". (default "human")
```

## Global Flags

```none
-h, --help            Show help for this command.
    --unsafe-trace    Equivalent to -vvvv, but also log HTTP requests and responses which might contain plaintext secrets.
-v, --verbose count   Increase verbosity (-v for warn, -vv for info, -vvv for debug, -vvvv for trace).
```

## Examples

### Cloud

List the role bindings for the current user:

```none
confluent iam rbac role-binding list --current-user
```

List the role bindings for user “u-123456”:

```none
confluent iam rbac role-binding list --principal User:u-123456
```

List the role bindings for principals with role “CloudClusterAdmin”:

```none
confluent iam rbac role-binding list --role CloudClusterAdmin --current-environment --cloud-cluster lkc-123456
```

List the role bindings for user “u-123456” with role “CloudClusterAdmin”:

```none
confluent iam rbac role-binding list --principal User:u-123456 --role CloudClusterAdmin --environment env-123456 --cloud-cluster lkc-123456
```

List the role bindings for user “u-123456” for all scopes:

```none
confluent iam rbac role-binding list --principal User:u-123456 --inclusive
```

List the role bindings for the current user with the environment scope and nested scopes:

```none
confluent iam rbac role-binding list --current-user --environment env-123456 --inclusive
```

### On-Premises

Only use the `--resource` flag when specifying a `--role` with no `--principal` specified. If specifying a `--principal`, then the `--resource` flag is ignored. To list role bindings for a specific role on an identified resource:

```none
confluent iam rbac role-binding list --kafka-cluster 0000000000000000000000 --role DeveloperRead --resource Topic:my-topic
```

List the role bindings for a specific principal:

```none
confluent iam rbac role-binding list --kafka-cluster 0000000000000000000000 --principal User:my-user
```

List the role bindings for a specific principal, filtered to a specific role:

```none
confluent iam rbac role-binding list --kafka-cluster 0000000000000000000000 --principal User:my-user --role DeveloperRead
```

List the principals bound to a specific role:

```none
confluent iam rbac role-binding list --kafka-cluster 0000000000000000000000 --role DeveloperWrite
```

List the principals bound to a specific resource with a specific role:

```none
confluent iam rbac role-binding list --kafka-cluster 0000000000000000000000 --role DeveloperWrite --resource Topic:my-topic
```

## See Also

* [confluent iam rbac role-binding](index.md#confluent-iam-rbac-role-binding) - Manage RBAC and IAM role bindings.