Bulk operations on restricted "account*" plugins?

[ldelelis]

A frequent use case on our bastion implementation is to operate on multiple users to update a particular ACL. The way we do it is via looping from a regular shell, accessing a bastion admin user, and updating this ACL with the respective bastion plugin.

I'd like to know if it would be possible to implement a way to bulk these operations into a single accountAddPersonalAccess command. Something like passing --account multiple times, or having a new --accounts option that takes a comma separated list of account names

I understand this is normally an use case for Bastion groups. However, our topology requires that we use individual users for this, so groups are not an option.

[speed47]

Hello,

This is also a use case we have from time to time, and the --account A,B,C option is definitely doable.
I'll keep this ticket as a reminder, knowing that it would be useful for others will help me prioritize :)