# confluent local services schema-registry acl #### IMPORTANT - The [confluent local](https://docs.confluent.io/confluent-cli/current/command-reference/local/index.html) commands are intended for a single-node development environment and are not suitable for a production environment. The data that are produced are transient and are intended to be temporary. For production-ready workflows, see [Install and Upgrade Confluent Platform](/platform/current/installation/index.html). ## Description Specify an ACL for Schema Registry. ```none confluent local services schema-registry acl [flags] ``` ## Flags ```none --add Indicates you are trying to add ACLs. --list List all the current ACLs. --remove Indicates you are trying to remove ACLs. -o, --operation string Operation that is being authorized. Valid operation names are SUBJECT_READ, SUBJECT_WRITE, SUBJECT_DELETE, SUBJECT_COMPATIBILITY_READ, SUBJECT_COMPATIBILITY_WRITE, GLOBAL_COMPATIBILITY_READ, GLOBAL_COMPATIBILITY_WRITE, and GLOBAL_SUBJECTS_READ. -p, --principal string Principal to which the ACL is being applied to. Use * to apply to all principals. -s, --subject string Subject to which the ACL is being applied to. Only applicable for SUBJECT operations. Use * to apply to all subjects. -t, --topic string Topic to which the ACL is being applied to. The corresponding subjects would be topic-key and topic-value. Only applicable for SUBJECT operations. Use * to apply to all subjects. ``` ## Global Flags ```none -h, --help Show help for this command. --unsafe-trace Equivalent to -vvvv, but also log HTTP requests and responses which might contain plaintext secrets. -v, --verbose count Increase verbosity (-v for warn, -vv for info, -vvv for debug, -vvvv for trace). ``` ## See Also * [confluent local services schema-registry](index.md#confluent-local-services-schema-registry) - Manage Schema Registry.