oz0 plugin grant

Usage and flags for oz0 plugin grant.

For: Operators and developers looking up a command.

A plugin's uses: may mark a used plugin optional: the plugin works without it, so an install asks only for the optional plugins the tenant has, and installs and grants none it lacks. Once the tenant installs one of those, this command asks for its grant: without --accept-uses it prints what the plugin asks and the digest that grants it, and changes nothing; with that digest it grants it. Until then the plugin's flow steps that need it are skipped.

A grant that changed since the digest was printed is refused, with the new request. Tenant admins may; it is audited (uses.grant), and oz0 plugin revoke takes it back.

Usage

oz0 plugin grant <plugin> [flags]

Flags

FlagTypeDefaultDescription
--accept-usesstringgrant the request whose digest a call without it printed
--jsonboolprint JSON instead of a table
--reasonstringwhat the grant is for, kept with it and in its audit entry
--tenantstringdefaulttenant

Inherited flags

FlagTypeDefaultDescription
--contextstring$OZ0_CONTEXT or <config dir>/orchestrator-zero/context.jsonCLI context file written by server init
--log-levelstringinfolog level: debug, info, warn or error

See all oz0 commands and the global flags.

On this page
Copyright © 2026