oz0 account memberships
Usage and flags for oz0 account memberships.
For: Operators and developers looking up a command.
Replace the memberships given through this provider with --member TENANT:ROLE (repeat it; ROLE is reader, operator, admin or owner, with +content or -content to change the role's default permission to see content). Memberships anyone else made, by hand or by group rules, stay and are listed.
A provisioner gives a role only in a tenant that allowed it, up to the role allowed there (oz0 tenant provisioner allow); one it may not give refuses the whole request, and removing what it gave is never refused.
Usage
oz0 account memberships [flags]
Flags
| Flag | Type | Default | Description |
|---|---|---|---|
--json | bool | print JSON instead of a table | |
--member | stringArray | TENANT:ROLE, such as acme:operator (repeat it) | |
--provider | string | the identity provider's ID, as oidc list shows it | |
--subject | string | the provider's immutable ID for the person (its sub) |
Inherited flags
| Flag | Type | Default | Description |
|---|---|---|---|
--context | string | $OZ0_CONTEXT or <config dir>/orchestrator-zero/context.json | CLI context file written by server init |
--log-level | string | info | log level: debug, info, warn or error |
See all oz0 commands and the global flags.