List identities in a Domain

Identities are the User and ServiceIdentity principals visible inside a Domain. plexctl identity wraps the /v1/domains/{id}/identities surface.

Prerequisites

• An authenticated session — see Log in with plexctl.
• The Domain UUID — see Manage Domains.

Steps

List identities

plexctl identity list --domain <domain-uuid> --all

Filter by principal kind with the operator-friendly aliases:

plexctl identity list --domain <domain-uuid> --type human     # Users
plexctl identity list --domain <domain-uuid> --type service    # ServiceIdentities

Inspect one principal

plexctl identity get --domain <domain-uuid> <principal-uuid>

Both --domain and the positional UUID are required. The plaintext email field is returned only to callers holding the Domain auditor relation; non-auditors see an empty EMAIL column, which is itself the signal that the token lacks that relation.

Verification

plexctl identity list --domain <domain-uuid> --output json | jq 'length'

See also

• Invite an operator — add a new User.
• ../../reference/cli/plexctl/identity.md — every flag and exit code.
• ../../contexts/identity/invitations.md — the identity and invitation model.