oz0 account upsert

Make an account linked to the external ID, without a password, so the person's first sign-in through the provider finds it by that ID and never by name.

For: Operators and developers looking up a command.

Make an account linked to the external ID, without a password, so the person's first sign-in through the provider finds it by that ID and never by name. An external ID that has an account gets it back unchanged: its name stays. A name another account holds is refused, never merged.

Usage

oz0 account upsert [flags]

Flags

FlagTypeDefaultDescription
--emailstringthe person's address at the provider
--jsonboolprint JSON instead of a table
--namestringthe account's name, when it is made
--providerstringthe identity provider's ID, as oidc list shows it
--rolestringthe provider'sa new account's cluster role: member or reader
--subjectstringthe provider's immutable ID for the person (its sub)

Inherited flags

FlagTypeDefaultDescription
--contextstring$OZ0_CONTEXT or <config dir>/orchestrator-zero/context.jsonCLI context file written by server init
--log-levelstringinfolog level: debug, info, warn or error

See all oz0 commands and the global flags.

On this page
Copyright © 2026