oz0 policy remove
Remove one rule, by its ID (oz0 policy show lists them).
For: Operators and developers looking up a command.
Remove one rule, by its ID (oz0 policy show lists them). The rules after it move up. Removing a rule that refuses or asks loosens the policy: it takes a reason and waits for another admin where four eyes are on. The built-in taint-default and origin-default rules are not removed: turn them off with oz0 tenant tool-policy set --taint-default off or --origin-default off, with a reason.
Usage
oz0 policy remove <id> [flags]
Flags
| Flag | Type | Default | Description |
|---|---|---|---|
--decision-ref | string | the decision or case the change follows, such as a case number (at most 200 characters) | |
--reason | string | why, required for every governance change (at most 500 characters; default $OZ0_REASON); the audit log keeps it | |
--tenant | string | default | tenant |
Inherited flags
| Flag | Type | Default | Description |
|---|---|---|---|
--context | string | $OZ0_CONTEXT or <config dir>/orchestrator-zero/context.json | CLI context file written by server init |
--log-level | string | info | log level: debug, info, warn or error |
See all oz0 commands and the global flags.