---
title: "identitypolicy create"
slug: "identitypolicy-create"
updated: 2026-10-27T17:24:49Z
published: 2026-10-27T17:24:49Z
canonical: "docs.vastdata.com/identitypolicy-create"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.vastdata.com/llms.txt
> Use this file to discover all available pages before exploring further.

# identitypolicy create

This command creates an identity policy.

> [!NOTE]
> Note
> 
> This command requires you to enter policy content in the command line. Since the policy content is multi-line, you may find that your SSH terminal does not succeed in creating the policies.
> 
> In case of difficulty, we recommend you use the VAST Web UI to [add identity policies to VMS](/docs-5-3/docs/en/creating-identity-policies).

## Usage

```plaintext
identitypolicy create --name NAME
                      --policy POLICY
                      --tenant-id ID
```

## Required Parameters

| `--name NAME` | Specifies a name for the identity policy. |
| --- | --- |
| `--policy POLICY` | Enter the identity policy content in JSON format. For information about how to write identity policies, see [Creating Identity Policies](/docs-5-3/docs/en/creating-identity-policies) . |
| `--tenant-id ID` | Identifies the tenant associated with this identity policy. |

## Example

This example creates an identity policy that allows any user on tenant 2 to which the identity policy is attached to perform all actions on all resources:

```plaintext
vcli: admin> identitypolicy create --name allow_all --tenant-id 2 --policy '    {
                   "Version": "2012-10-17",
                   "Statement": [{
                   "Sid": "AllowAllActionsAllResources",
                   "Action":
                     "*",
                   "Effect": "Allow",
                   "Resource":
                     "*"

                 }
                   ]
                 }'
```