---
title: "oz0 account upsert"
description: "Make an account linked to the external ID, without a password, so the person's first sign-in through the provider finds it by that ID and never by name."
canonical_url: "https://docs.oz0.ai/reference/cli/oz0/account/upsert"
---
# oz0 account upsert

> Make an account linked to the external ID, without a password, so the person's first sign-in through the provider finds it by that ID and never by name.

For: Operators and developers looking up a command.

Make an account linked to the external ID, without a password, so the person's first sign-in through the provider finds it by that ID and never by name. An external ID that has an account gets it back unchanged: its name stays. A name another account holds is refused, never merged.

## Usage

```bash
oz0 account upsert [flags]
```

## Flags

<table>
<thead>
  <tr>
    <th>
      Flag
    </th>
    
    <th>
      Type
    </th>
    
    <th>
      Default
    </th>
    
    <th>
      Description
    </th>
  </tr>
</thead>

<tbody>
  <tr>
    <td>
      <code>
        --email
      </code>
    </td>
    
    <td>
      string
    </td>
    
    <td>
      
    </td>
    
    <td>
      the person's address at the provider
    </td>
  </tr>
  
  <tr>
    <td>
      <code>
        --json
      </code>
    </td>
    
    <td>
      bool
    </td>
    
    <td>
      
    </td>
    
    <td>
      print JSON instead of a table
    </td>
  </tr>
  
  <tr>
    <td>
      <code>
        --name
      </code>
    </td>
    
    <td>
      string
    </td>
    
    <td>
      
    </td>
    
    <td>
      the account's name, when it is made
    </td>
  </tr>
  
  <tr>
    <td>
      <code>
        --provider
      </code>
    </td>
    
    <td>
      string
    </td>
    
    <td>
      
    </td>
    
    <td>
      the identity provider's ID, as oidc list shows it
    </td>
  </tr>
  
  <tr>
    <td>
      <code>
        --role
      </code>
    </td>
    
    <td>
      string
    </td>
    
    <td>
      <code>
        the provider's
      </code>
    </td>
    
    <td>
      a new account's cluster role: member or reader
    </td>
  </tr>
  
  <tr>
    <td>
      <code>
        --subject
      </code>
    </td>
    
    <td>
      string
    </td>
    
    <td>
      
    </td>
    
    <td>
      the provider's immutable ID for the person (its sub)
    </td>
  </tr>
</tbody>
</table>

## Inherited flags

<table>
<thead>
  <tr>
    <th>
      Flag
    </th>
    
    <th>
      Type
    </th>
    
    <th>
      Default
    </th>
    
    <th>
      Description
    </th>
  </tr>
</thead>

<tbody>
  <tr>
    <td>
      <code>
        --context
      </code>
    </td>
    
    <td>
      string
    </td>
    
    <td>
      <code>
        $OZ0_CONTEXT or &lt;config dir>/orchestrator-zero/context.json
      </code>
    </td>
    
    <td>
      CLI context file written by server init
    </td>
  </tr>
  
  <tr>
    <td>
      <code>
        --log-level
      </code>
    </td>
    
    <td>
      string
    </td>
    
    <td>
      <code>
        info
      </code>
    </td>
    
    <td>
      log level: debug, info, warn or error
    </td>
  </tr>
</tbody>
</table>

See [all `oz0` commands](https://docs.oz0.ai/reference/cli/oz0) and the [global flags](https://docs.oz0.ai/reference/cli/oz0#global-flags).


## Sitemap

See the full [sitemap](https://docs.oz0.ai/sitemap.md) for all pages.