List identities in a Domain

Identities are the User and ServiceIdentity principals visible inside a Domain. plexctl identity wraps the /v1/domains/{id}/identities surface.

Prerequisites

• An authenticated session — see Log in with plexctl.
• The Domain UUID — see Manage Domains.

Steps

List identities

plexctl identity list --domain <domain-uuid> --all
# ID  EMAIL            KIND     DOMAIN  DISPLAY_NAME  CREATED_AT
# …   ops@example.com  user     …       Ops           …
# …                    service  …       ci-runner     …

Filter by principal kind with the operator-friendly aliases:

plexctl identity list --domain <domain-uuid> --type human     # Users
plexctl identity list --domain <domain-uuid> --type service    # ServiceIdentities

Inspect one principal

plexctl identity get --domain <domain-uuid> <principal-uuid>

Both --domain and the positional UUID are required. The plaintext email field is returned only to callers holding the Domain auditor relation; non-auditors see an empty EMAIL column, which is itself the signal that the token lacks that relation.

Verification

plexctl identity list --domain <domain-uuid> --output json | jq 'length'
# 12

See also

• Invite an operator — add a new User.
• ../../reference/cli/plexctl/identity.md — every flag and exit code.
• ../../contexts/identity/invitations.md — the identity and invitation model.