oz0 plugin revoke-reads

Takes back a record kind a tenant admin granted a plugin to read at install (plugin install --accept-reads), or every kind without one.

For: Operators and developers looking up a command.

Takes back a record kind a tenant admin granted a plugin to read at install (plugin install --accept-reads), or every kind without one. The plugin stays installed; from then on its calls get none of that record, and for inventory the inventory's changes fire none of its routines and flows. A later install asks for the grant again. Tenant admins may; it is audited (plugin.reads.revoked).

Usage

oz0 plugin revoke-reads <plugin> [kind] [flags]

Flags

FlagTypeDefaultDescription
--jsonboolprint JSON instead of a table
--tenantstringdefaulttenant

Inherited flags

FlagTypeDefaultDescription
--contextstring$OZ0_CONTEXT or <config dir>/orchestrator-zero/context.jsonCLI context file written by server init
--log-levelstringinfolog level: debug, info, warn or error

See all oz0 commands and the global flags.

On this page
Copyright © 2026