CLI
  • Introduction
  • QuickStart
  • Collections vs Endpoints
  • High Assurance
  • Environment Variables
  • JMESPath Queries
  • Reference
    • CLI Changelog
    • GLOBUS API AUTH
    • GLOBUS API FLOWS
    • GLOBUS API GCS
    • GLOBUS API GROUPS
    • GLOBUS API SEARCH
    • GLOBUS API TIMERS
    • GLOBUS API TRANSFER
    • GLOBUS BOOKMARK CREATE
    • GLOBUS BOOKMARK DELETE
    • GLOBUS BOOKMARK LIST
    • GLOBUS BOOKMARK RENAME
    • GLOBUS BOOKMARK SHOW
    • GLOBUS CLI-PROFILE-LIST
    • GLOBUS COLLECTION CREATE GUEST
    • GLOBUS COLLECTION CREATE MAPPED
    • GLOBUS COLLECTION DELETE
    • GLOBUS COLLECTION LIST
    • GLOBUS COLLECTION SHOW
    • GLOBUS COLLECTION UPDATE
    • GLOBUS DELETE
    • GLOBUS ENDPOINT DELETE
    • GLOBUS ENDPOINT LOCAL-ID
    • GLOBUS ENDPOINT MY-SHARED-ENDPOINT-LIST
    • GLOBUS ENDPOINT PERMISSION CREATE
    • GLOBUS ENDPOINT PERMISSION DELETE
    • GLOBUS ENDPOINT PERMISSION LIST
    • GLOBUS ENDPOINT PERMISSION SHOW
    • GLOBUS ENDPOINT PERMISSION UPDATE
    • GLOBUS ENDPOINT ROLE CREATE
    • GLOBUS ENDPOINT ROLE DELETE
    • GLOBUS ENDPOINT ROLE LIST
    • GLOBUS ENDPOINT ROLE SHOW
    • GLOBUS ENDPOINT SEARCH
    • GLOBUS ENDPOINT SET-SUBSCRIPTION-ID
    • GLOBUS ENDPOINT SHOW
    • GLOBUS ENDPOINT STORAGE-GATEWAY LIST
    • GLOBUS ENDPOINT UPDATE
    • GLOBUS ENDPOINT USER-CREDENTIAL CREATE FROM-JSON
    • GLOBUS ENDPOINT USER-CREDENTIAL CREATE POSIX
    • GLOBUS ENDPOINT USER-CREDENTIAL CREATE S3
    • GLOBUS ENDPOINT USER-CREDENTIAL DELETE
    • GLOBUS ENDPOINT USER-CREDENTIAL LIST
    • GLOBUS ENDPOINT USER-CREDENTIAL SHOW
    • GLOBUS FLOWS CREATE
    • GLOBUS FLOWS DELETE
    • GLOBUS FLOWS LIST
    • GLOBUS FLOWS RUN CANCEL
    • GLOBUS FLOWS RUN DELETE
    • GLOBUS FLOWS RUN LIST
    • GLOBUS FLOWS RUN RESUME
    • GLOBUS FLOWS RUN SHOW
    • GLOBUS FLOWS RUN SHOW-DEFINITION
    • GLOBUS FLOWS RUN SHOW-LOGS
    • GLOBUS FLOWS RUN UPDATE
    • GLOBUS FLOWS SHOW
    • GLOBUS FLOWS START
    • GLOBUS FLOWS UPDATE
    • GLOBUS FLOWS VALIDATE
    • GLOBUS GCP CREATE GUEST
    • GLOBUS GCP CREATE MAPPED
    • GLOBUS GCP SET-SUBSCRIPTION-ID
    • GLOBUS GCP UPDATE GUEST
    • GLOBUS GCP UPDATE MAPPED
    • GLOBUS GCS COLLECTION CREATE GUEST
    • GLOBUS GCS COLLECTION CREATE MAPPED
    • GLOBUS GCS COLLECTION DELETE
    • GLOBUS GCS COLLECTION LIST
    • GLOBUS GCS COLLECTION SHOW
    • GLOBUS GCS COLLECTION UPDATE
    • GLOBUS GCS ENDPOINT ROLE CREATE
    • GLOBUS GCS ENDPOINT ROLE DELETE
    • GLOBUS GCS ENDPOINT ROLE LIST
    • GLOBUS GCS ENDPOINT ROLE SHOW
    • GLOBUS GCS ENDPOINT SET-SUBSCRIPTION-ID
    • GLOBUS GCS ENDPOINT SHOW
    • GLOBUS GCS ENDPOINT UPDATE
    • GLOBUS GCS STORAGE-GATEWAY LIST
    • GLOBUS GCS USER-CREDENTIAL CREATE FROM-JSON
    • GLOBUS GCS USER-CREDENTIAL CREATE POSIX
    • GLOBUS GCS USER-CREDENTIAL CREATE S3
    • GLOBUS GCS USER-CREDENTIAL DELETE
    • GLOBUS GCS USER-CREDENTIAL LIST
    • GLOBUS GCS USER-CREDENTIAL SHOW
    • GLOBUS GET-IDENTITIES
    • GLOBUS GROUP CREATE
    • GLOBUS GROUP DELETE
    • GLOBUS GROUP GET-BY-SUBSCRIPTION
    • GLOBUS GROUP GET-SUBSCRIPTION-INFO
    • GLOBUS GROUP INVITE ACCEPT
    • GLOBUS GROUP INVITE DECLINE
    • GLOBUS GROUP JOIN
    • GLOBUS GROUP LEAVE
    • GLOBUS GROUP LIST
    • GLOBUS GROUP MEMBER ADD
    • GLOBUS GROUP MEMBER APPROVE
    • GLOBUS GROUP MEMBER INVITE
    • GLOBUS GROUP MEMBER LIST
    • GLOBUS GROUP MEMBER REJECT
    • GLOBUS GROUP MEMBER REMOVE
    • GLOBUS GROUP SET-POLICIES
    • GLOBUS GROUP SHOW
    • GLOBUS GROUP UPDATE
    • GLOBUS LIST-COMMANDS
    • GLOBUS LOGIN
    • GLOBUS LOGOUT
    • GLOBUS LS
    • GLOBUS MKDIR
    • GLOBUS RENAME
    • GLOBUS RM
    • GLOBUS SEARCH DELETE-BY-QUERY
    • GLOBUS SEARCH INDEX CREATE
    • GLOBUS SEARCH INDEX DELETE
    • GLOBUS SEARCH INDEX LIST
    • GLOBUS SEARCH INDEX ROLE CREATE
    • GLOBUS SEARCH INDEX ROLE DELETE
    • GLOBUS SEARCH INDEX ROLE LIST
    • GLOBUS SEARCH INDEX SHOW
    • GLOBUS SEARCH INGEST
    • GLOBUS SEARCH QUERY
    • GLOBUS SEARCH SUBJECT DELETE
    • GLOBUS SEARCH SUBJECT SHOW
    • GLOBUS SEARCH TASK LIST
    • GLOBUS SEARCH TASK SHOW
    • GLOBUS SESSION CONSENT
    • GLOBUS SESSION SHOW
    • GLOBUS SESSION UPDATE
    • GLOBUS STAT
    • GLOBUS TASK CANCEL
    • GLOBUS TASK EVENT-LIST
    • GLOBUS TASK GENERATE-SUBMISSION-ID
    • GLOBUS TASK LIST
    • GLOBUS TASK PAUSE-INFO
    • GLOBUS TASK SHOW
    • GLOBUS TASK UPDATE
    • GLOBUS TASK WAIT
    • GLOBUS TIMER CREATE TRANSFER
    • GLOBUS TIMER DELETE
    • GLOBUS TIMER LIST
    • GLOBUS TIMER PAUSE
    • GLOBUS TIMER RESUME
    • GLOBUS TIMER SHOW
    • GLOBUS TRANSFER
    • GLOBUS UPDATE
    • GLOBUS VERSION
    • GLOBUS WHOAMI
  • Examples
Skip to main content
Globus Docs
  • APIs
    Auth Flows Groups Search Timers Transfer Globus Connect Server Compute Helper Pages
  • Applications
    Globus Connect Personal Globus Connect Server Premium Storage Connectors Compute Command Line Interface Python SDK JavaScript SDK
  • Guides
  • Support
    FAQs Mailing Lists Contact Us Check Support Tickets
  1. Home
  2. Introduction
  3. Environment Variables

Environment Variables for Globus CLI

This document covers the various environment variables with special meanings for the Globus CLI.

Globus SDK Variables

The CLI supports all of the environment variables which can be used to configure the Globus SDK.

For the most part, CLI users will not need to modify these values. However, for the particular case of GLOBUS_SDK_ENVIRONMENT, the CLI has special additional handling.

When the environment is set, as in GLOBUS_SDK_ENVIRONMENT="preview", the CLI will isolate any credentials used for login and session management. globus login, globus logout, and other commands will operate in the context of the "preview" environment, for example.

Interactivity with GLOBUS_CLI_INTERACTIVE

Certain features of the CLI will be enabled or disabled based on whether or not the terminal session used to run it is detected as interactive or not. For example, additional usage hints may be printed to stderr in an interactive terminal.

However, it is possible for the interactivity detection to be fooled. For example, an automated tool which emulates a login shell may appear interactive even though it is not.

To control these behaviors, the CLI allows users to explicitly specify whether or not the shell is interactive. Use GLOBUS_CLI_INTERACTIVE=0 to set "not interactive", and GLOBUS_CLI_INTERACTIVE=1 to set "yes, interactive".

Profile-switching with GLOBUS_PROFILE

The Globus CLI allows users to login, logout, and perform various other authentication- and authorization-related activities. Until version 3, however, the only way to switch to another Globus Account was to logout and login again.

Starting in version 3, the Globus CLI respects a new variable, GLOBUS_PROFILE, which names the "profile", or set of credentials, which the CLI uses.

When the GLOBUS_PROFILE variable is not set, a default profile is used. Any string value which is assigned to the profile variable acts as an alternative profile name.

For example, one could setup the default profile and a profile named bar as follows:

$ globus login
...  # login as foo@example.org
$ export GLOBUS_PROFILE=bar
$ globus login
...  # login as bar@example.org

Now, unset GLOBUS_PROFILE will allow the user to act as foo@example.org and export GLOBUS_PROFILE=bar will allow the user to switch back to bar@example.org.

Note

Switching between accounts using GLOBUS_PROFILE is a way of keeping them unlinked, meaning that the user has multiple identities which are isolated into separate accounts. This is not the same as having multiple identities which are linked into a single Globus Account.

Client Credentials with GLOBUS_CLI_CLIENT_ID

New in Globus CLI version 3.2!

The Globus CLI supports use of client credentials for login, if you have registered a client.

To use client credentials, you must set GLOBUS_CLI_CLIENT_ID to your client ID, and GLOBUS_CLI_CLIENT_SECRET to your client secret. You may then use globus commands as normal, with no need to run globus login.

For example, with an ID of b0500dab-ebd4-430f-b962-0c85bd43bdbb and a secret of ABCDEFGHIJKLMNOP0123456789=:

$ export GLOBUS_CLI_CLIENT_ID="b0500dab-ebd4-430f-b962-0c85bd43bdbb"
$ export GLOBUS_CLI_CLIENT_SECRET="ABCDEFGHIJKLMNOP0123456789="
$ globus whoami
b0500dab-ebd4-430f-b962-0c85bd43bdbb@clients.auth.globus.org
Note

Although globus login is not allowed with client credentials, globus logout still has an effect. logout will clean up any cached credentials for the current client.

  • Introduction
  • QuickStart
  • Collections vs Endpoints
  • High Assurance
  • Environment Variables
  • JMESPath Queries
  • Reference
    • CLI Changelog
    • GLOBUS API AUTH
    • GLOBUS API FLOWS
    • GLOBUS API GCS
    • GLOBUS API GROUPS
    • GLOBUS API SEARCH
    • GLOBUS API TIMERS
    • GLOBUS API TRANSFER
    • GLOBUS BOOKMARK CREATE
    • GLOBUS BOOKMARK DELETE
    • GLOBUS BOOKMARK LIST
    • GLOBUS BOOKMARK RENAME
    • GLOBUS BOOKMARK SHOW
    • GLOBUS CLI-PROFILE-LIST
    • GLOBUS COLLECTION CREATE GUEST
    • GLOBUS COLLECTION CREATE MAPPED
    • GLOBUS COLLECTION DELETE
    • GLOBUS COLLECTION LIST
    • GLOBUS COLLECTION SHOW
    • GLOBUS COLLECTION UPDATE
    • GLOBUS DELETE
    • GLOBUS ENDPOINT DELETE
    • GLOBUS ENDPOINT LOCAL-ID
    • GLOBUS ENDPOINT MY-SHARED-ENDPOINT-LIST
    • GLOBUS ENDPOINT PERMISSION CREATE
    • GLOBUS ENDPOINT PERMISSION DELETE
    • GLOBUS ENDPOINT PERMISSION LIST
    • GLOBUS ENDPOINT PERMISSION SHOW
    • GLOBUS ENDPOINT PERMISSION UPDATE
    • GLOBUS ENDPOINT ROLE CREATE
    • GLOBUS ENDPOINT ROLE DELETE
    • GLOBUS ENDPOINT ROLE LIST
    • GLOBUS ENDPOINT ROLE SHOW
    • GLOBUS ENDPOINT SEARCH
    • GLOBUS ENDPOINT SET-SUBSCRIPTION-ID
    • GLOBUS ENDPOINT SHOW
    • GLOBUS ENDPOINT STORAGE-GATEWAY LIST
    • GLOBUS ENDPOINT UPDATE
    • GLOBUS ENDPOINT USER-CREDENTIAL CREATE FROM-JSON
    • GLOBUS ENDPOINT USER-CREDENTIAL CREATE POSIX
    • GLOBUS ENDPOINT USER-CREDENTIAL CREATE S3
    • GLOBUS ENDPOINT USER-CREDENTIAL DELETE
    • GLOBUS ENDPOINT USER-CREDENTIAL LIST
    • GLOBUS ENDPOINT USER-CREDENTIAL SHOW
    • GLOBUS FLOWS CREATE
    • GLOBUS FLOWS DELETE
    • GLOBUS FLOWS LIST
    • GLOBUS FLOWS RUN CANCEL
    • GLOBUS FLOWS RUN DELETE
    • GLOBUS FLOWS RUN LIST
    • GLOBUS FLOWS RUN RESUME
    • GLOBUS FLOWS RUN SHOW
    • GLOBUS FLOWS RUN SHOW-DEFINITION
    • GLOBUS FLOWS RUN SHOW-LOGS
    • GLOBUS FLOWS RUN UPDATE
    • GLOBUS FLOWS SHOW
    • GLOBUS FLOWS START
    • GLOBUS FLOWS UPDATE
    • GLOBUS FLOWS VALIDATE
    • GLOBUS GCP CREATE GUEST
    • GLOBUS GCP CREATE MAPPED
    • GLOBUS GCP SET-SUBSCRIPTION-ID
    • GLOBUS GCP UPDATE GUEST
    • GLOBUS GCP UPDATE MAPPED
    • GLOBUS GCS COLLECTION CREATE GUEST
    • GLOBUS GCS COLLECTION CREATE MAPPED
    • GLOBUS GCS COLLECTION DELETE
    • GLOBUS GCS COLLECTION LIST
    • GLOBUS GCS COLLECTION SHOW
    • GLOBUS GCS COLLECTION UPDATE
    • GLOBUS GCS ENDPOINT ROLE CREATE
    • GLOBUS GCS ENDPOINT ROLE DELETE
    • GLOBUS GCS ENDPOINT ROLE LIST
    • GLOBUS GCS ENDPOINT ROLE SHOW
    • GLOBUS GCS ENDPOINT SET-SUBSCRIPTION-ID
    • GLOBUS GCS ENDPOINT SHOW
    • GLOBUS GCS ENDPOINT UPDATE
    • GLOBUS GCS STORAGE-GATEWAY LIST
    • GLOBUS GCS USER-CREDENTIAL CREATE FROM-JSON
    • GLOBUS GCS USER-CREDENTIAL CREATE POSIX
    • GLOBUS GCS USER-CREDENTIAL CREATE S3
    • GLOBUS GCS USER-CREDENTIAL DELETE
    • GLOBUS GCS USER-CREDENTIAL LIST
    • GLOBUS GCS USER-CREDENTIAL SHOW
    • GLOBUS GET-IDENTITIES
    • GLOBUS GROUP CREATE
    • GLOBUS GROUP DELETE
    • GLOBUS GROUP GET-BY-SUBSCRIPTION
    • GLOBUS GROUP GET-SUBSCRIPTION-INFO
    • GLOBUS GROUP INVITE ACCEPT
    • GLOBUS GROUP INVITE DECLINE
    • GLOBUS GROUP JOIN
    • GLOBUS GROUP LEAVE
    • GLOBUS GROUP LIST
    • GLOBUS GROUP MEMBER ADD
    • GLOBUS GROUP MEMBER APPROVE
    • GLOBUS GROUP MEMBER INVITE
    • GLOBUS GROUP MEMBER LIST
    • GLOBUS GROUP MEMBER REJECT
    • GLOBUS GROUP MEMBER REMOVE
    • GLOBUS GROUP SET-POLICIES
    • GLOBUS GROUP SHOW
    • GLOBUS GROUP UPDATE
    • GLOBUS LIST-COMMANDS
    • GLOBUS LOGIN
    • GLOBUS LOGOUT
    • GLOBUS LS
    • GLOBUS MKDIR
    • GLOBUS RENAME
    • GLOBUS RM
    • GLOBUS SEARCH DELETE-BY-QUERY
    • GLOBUS SEARCH INDEX CREATE
    • GLOBUS SEARCH INDEX DELETE
    • GLOBUS SEARCH INDEX LIST
    • GLOBUS SEARCH INDEX ROLE CREATE
    • GLOBUS SEARCH INDEX ROLE DELETE
    • GLOBUS SEARCH INDEX ROLE LIST
    • GLOBUS SEARCH INDEX SHOW
    • GLOBUS SEARCH INGEST
    • GLOBUS SEARCH QUERY
    • GLOBUS SEARCH SUBJECT DELETE
    • GLOBUS SEARCH SUBJECT SHOW
    • GLOBUS SEARCH TASK LIST
    • GLOBUS SEARCH TASK SHOW
    • GLOBUS SESSION CONSENT
    • GLOBUS SESSION SHOW
    • GLOBUS SESSION UPDATE
    • GLOBUS STAT
    • GLOBUS TASK CANCEL
    • GLOBUS TASK EVENT-LIST
    • GLOBUS TASK GENERATE-SUBMISSION-ID
    • GLOBUS TASK LIST
    • GLOBUS TASK PAUSE-INFO
    • GLOBUS TASK SHOW
    • GLOBUS TASK UPDATE
    • GLOBUS TASK WAIT
    • GLOBUS TIMER CREATE TRANSFER
    • GLOBUS TIMER DELETE
    • GLOBUS TIMER LIST
    • GLOBUS TIMER PAUSE
    • GLOBUS TIMER RESUME
    • GLOBUS TIMER SHOW
    • GLOBUS TRANSFER
    • GLOBUS UPDATE
    • GLOBUS VERSION
    • GLOBUS WHOAMI
  • Examples
© 2010- The University of Chicago Legal Privacy Accessibility