---
title: "oz0 account memberships"
description: "Usage and flags for oz0 account memberships."
canonical_url: "https://docs.oz0.ai/reference/cli/oz0/account/memberships"
---
# oz0 account memberships

> Usage and flags for oz0 account memberships.

For: Operators and developers looking up a command.

Replace the memberships given through this provider with --member TENANT:ROLE (repeat it; ROLE is reader, operator, admin or owner, with +content or -content to change the role's default permission to see content). Memberships anyone else made, by hand or by group rules, stay and are listed.

A provisioner gives a role only in a tenant that allowed it, up to the role allowed there (oz0 tenant provisioner allow); one it may not give refuses the whole request, and removing what it gave is never refused.

## Usage

```bash
oz0 account memberships [flags]
```

## Flags

<table>
<thead>
  <tr>
    <th>
      Flag
    </th>
    
    <th>
      Type
    </th>
    
    <th>
      Default
    </th>
    
    <th>
      Description
    </th>
  </tr>
</thead>

<tbody>
  <tr>
    <td>
      <code>
        --json
      </code>
    </td>
    
    <td>
      bool
    </td>
    
    <td>
      
    </td>
    
    <td>
      print JSON instead of a table
    </td>
  </tr>
  
  <tr>
    <td>
      <code>
        --member
      </code>
    </td>
    
    <td>
      stringArray
    </td>
    
    <td>
      
    </td>
    
    <td>
      TENANT:ROLE, such as acme:operator (repeat it)
    </td>
  </tr>
  
  <tr>
    <td>
      <code>
        --provider
      </code>
    </td>
    
    <td>
      string
    </td>
    
    <td>
      
    </td>
    
    <td>
      the identity provider's ID, as oidc list shows it
    </td>
  </tr>
  
  <tr>
    <td>
      <code>
        --subject
      </code>
    </td>
    
    <td>
      string
    </td>
    
    <td>
      
    </td>
    
    <td>
      the provider's immutable ID for the person (its sub)
    </td>
  </tr>
</tbody>
</table>

## Inherited flags

<table>
<thead>
  <tr>
    <th>
      Flag
    </th>
    
    <th>
      Type
    </th>
    
    <th>
      Default
    </th>
    
    <th>
      Description
    </th>
  </tr>
</thead>

<tbody>
  <tr>
    <td>
      <code>
        --context
      </code>
    </td>
    
    <td>
      string
    </td>
    
    <td>
      <code>
        $OZ0_CONTEXT or &lt;config dir>/orchestrator-zero/context.json
      </code>
    </td>
    
    <td>
      CLI context file written by server init
    </td>
  </tr>
  
  <tr>
    <td>
      <code>
        --log-level
      </code>
    </td>
    
    <td>
      string
    </td>
    
    <td>
      <code>
        info
      </code>
    </td>
    
    <td>
      log level: debug, info, warn or error
    </td>
  </tr>
</tbody>
</table>

See [all `oz0` commands](https://docs.oz0.ai/reference/cli/oz0) and the [global flags](https://docs.oz0.ai/reference/cli/oz0#global-flags).


## Sitemap

See the full [sitemap](https://docs.oz0.ai/sitemap.md) for all pages.