oz0 plugin reads grant
Grants a plugin that holds reads: [results] the results of one more target plugin.
For: Operators and developers looking up a command.
Grants a plugin that holds reads: [results] the results of one more target plugin. Only a person who signs in (or an operator's certificate) and holds plugins.install and content.read may, never a key: the reads are answered with your permissions. A target added widens what the plugin reads, so it takes a reason (--reason, or $OZ0_REASON) and, under four eyes, waits for another admin.
Granting a target the plugin holds already, as another person, makes your permissions answer its reads from then on: that is how a grant whose person lost a permission or left goes on, and it resolves the finding that said so. Audited as plugin.reads.granted.
Usage
oz0 plugin reads grant <plugin> results --target <plugin> [flags]
Flags
| Flag | Type | Default | Description |
|---|---|---|---|
--decision-ref | string | a reference to the decision behind it, such as a ticket | |
--json | bool | print JSON instead of a table | |
--reason | string | why, required (default $OZ0_REASON); the audit log keeps it | |
--target | string | the plugin whose results it may read | |
--tenant | string | default | tenant |
Inherited flags
| Flag | Type | Default | Description |
|---|---|---|---|
--context | string | $OZ0_CONTEXT or <config dir>/orchestrator-zero/context.json | CLI context file written by server init |
--log-level | string | info | log level: debug, info, warn or error |
See all oz0 commands and the global flags.