oz0 server provisioner

Usage and flags for oz0 server provisioner.

For: Operators and developers looking up a command.

A provisioner holds a certificate of its own kind that may call only the account calls of the admin API (oz0 account), for the identity providers it was issued for: it cannot read or change tenants, jobs, secrets, keys or identity providers, and every other API refuses it.

Usage

oz0 server provisioner [command]

Subcommands

Inherited flags

FlagTypeDefaultDescription
--contextstring$OZ0_CONTEXT or <config dir>/orchestrator-zero/context.jsonCLI context file written by server init
--log-levelstringinfolog level: debug, info, warn or error

See all oz0 commands and the global flags.

Copyright © 2026