oz0 replay privilege test
Usage and flags for oz0 replay privilege test.
For: Operators and developers looking up a command.
Starts a policy replay whose candidate is the privilege replay's suggestion, its rules acting with the preset origin privilege, over --since (the window the privilege replay read, by default 7 days); with --agent, that agent's rules over its jobs. A suggestion that refuses only what the agents never called changes no call they made; the report shows the calls it would have changed, such as one a person was asked about and said no to. Nothing is applied.
Usage
oz0 replay privilege test ID [--agent A] [--since 7d] [--wait] [flags]
Flags
| Flag | Type | Default | Description |
|---|---|---|---|
--agent | string | only this agent's jobs | |
--json | bool | print JSON instead of a table | |
--max-jobs | int32 | 2000, at most 10000 | at most this many jobs, newest first |
--plugin | string | only the jobs of this plugin's agents | |
--poll | duration | 2s | with --wait, how often to look |
--since | string | 7d | how far back to read: 7d, 36h, 90m |
--tenant | string | default | tenant |
--wait | bool | wait for the report and print it |
Inherited flags
| Flag | Type | Default | Description |
|---|---|---|---|
--context | string | $OZ0_CONTEXT or <config dir>/orchestrator-zero/context.json | CLI context file written by server init |
--log-level | string | info | log level: debug, info, warn or error |
See all oz0 commands and the global flags.