oz0 tenant mail-domains remove

The mail domains are where the mail agents send through the email plugin may go: the tenant's own, such as acme.se.

For: Operators and developers looking up a command.

The mail domains are where the mail agents send through the email plugin may go: the tenant's own, such as acme.se. A tenant has none until an admin adds them, so no mail is sent until then. Each domain counts alone: ops.acme.se is a domain of its own, and no wildcard is taken. A recipient outside them is refused, and the message is not sent, unless the tenant allows other domains (oz0 tenant mail-outside).

Adding a domain lets mail go to more people, so it takes --reason and, in a tenant with four eyes on, waits for another admin; removing one takes a reason too and applies at once. Admins of the tenant may change them; each change is audited (tenant.mail_domains).

Usage

oz0 tenant mail-domains remove <tenant> <domain> [<domain>...] [flags]

Flags

FlagTypeDefaultDescription
--decision-refstringthe decision or case the change follows, such as a case number (at most 200 characters)
--jsonboolprint JSON instead of a table
--reasonstringwhy, required for every governance change (at most 500 characters; default $OZ0_REASON); the audit log keeps it

Inherited flags

FlagTypeDefaultDescription
--contextstring$OZ0_CONTEXT or <config dir>/orchestrator-zero/context.jsonCLI context file written by server init
--log-levelstringinfolog level: debug, info, warn or error

See all oz0 commands and the global flags.

On this page
Copyright © 2026