oz0 tenant provisioner

Usage and flags for oz0 tenant provisioner.

For: Operators and developers looking up a command.

A provisioner (a directory sync with a certificate from oz0 server provisioner issue) gives memberships directly (oz0 account memberships) only in the tenants that allowed it, each up to the highest role allowed there, and the content permission only where allowed. Whoever manages a tenant's members allows it, within what they hold there themselves: up to owner takes one of the tenant's owners. Group rules of an identity provider are a cluster admin's, and are not bound by this.

Usage

oz0 tenant provisioner [command]

Subcommands

Inherited flags

FlagTypeDefaultDescription
--contextstring$OZ0_CONTEXT or <config dir>/orchestrator-zero/context.jsonCLI context file written by server init
--log-levelstringinfolog level: debug, info, warn or error

See all oz0 commands and the global flags.

Copyright © 2026