oz0 roles
A role is a named set of permissions.
For: Operators and developers looking up a command.
A role is a named set of permissions. The built-in roles are reader, operator, admin and owner (each holding what the one before holds), auditor (reads the audit trail, evidence, the inventory and governance, changes nothing), privacy-officer (finds and erases data subjects, places legal holds) and agent-user (uses the agents its membership grants in the chat drawer).
A server started with --role-sets-file or --role-sets-command adds a role set's roles; a role that left the set falls back to the strongest built-in role it held. --permissions lists the permission vocabulary with each permission's level.
Usage
oz0 roles [flags]
Flags
| Flag | Type | Default | Description |
|---|---|---|---|
--json | bool | print JSON instead of a table | |
--permissions | bool | list the permission vocabulary with each permission's level | |
--tenant | string | default | tenant |
Inherited flags
| Flag | Type | Default | Description |
|---|---|---|---|
--context | string | $OZ0_CONTEXT or <config dir>/orchestrator-zero/context.json | CLI context file written by server init |
--log-level | string | info | log level: debug, info, warn or error |
See all oz0 commands and the global flags.