oz0 policy export

Usage and flags for oz0 policy export.

For: Operators and developers looking up a command.

Write the tenant's whole tool policy as YAML (format oz0.policy/v1), to standard output or to a file with -o: the defaults by type, the approval settings, the built-in rules' switches and every rule in order, each with its ID and its settings as fields: allow, ask or refuse; shadow, when, callers, kinds, deciders, expires; origin and sequence rules as YAML. Change it and apply it with oz0 policy apply -f <file>. Takes governance.read.

Usage

oz0 policy export [flags]

Flags

FlagTypeDefaultDescription
--output (-o)stringwrite to this file (standard output when empty or -)
--tenantstringdefaulttenant

Inherited flags

FlagTypeDefaultDescription
--contextstring$OZ0_CONTEXT or <config dir>/orchestrator-zero/context.jsonCLI context file written by server init
--log-levelstringinfolog level: debug, info, warn or error

See all oz0 commands and the global flags.

On this page
Copyright © 2026