---
title: "oz0 tenant provisioner"
description: "Usage and flags for oz0 tenant provisioner."
canonical_url: "https://docs.oz0.ai/reference/cli/oz0/tenant/provisioner"
---
# oz0 tenant provisioner

> Usage and flags for oz0 tenant provisioner.

For: Operators and developers looking up a command.

A provisioner (a directory sync with a certificate from oz0 server provisioner issue) gives memberships directly (oz0 account memberships) only in the tenants that allowed it, each up to the highest role allowed there, and the content permission only where allowed. Whoever manages a tenant's members allows it, within what they hold there themselves: up to owner takes one of the tenant's owners. Group rules of an identity provider are a cluster admin's, and are not bound by this.

## Usage

```bash
oz0 tenant provisioner [command]
```

## Subcommands

- [`allow`](https://docs.oz0.ai/reference/cli/oz0/tenant/provisioner/allow)
- [`list`](https://docs.oz0.ai/reference/cli/oz0/tenant/provisioner/list)
- [`remove`](https://docs.oz0.ai/reference/cli/oz0/tenant/provisioner/remove)

## Inherited flags

<table>
<thead>
  <tr>
    <th>
      Flag
    </th>
    
    <th>
      Type
    </th>
    
    <th>
      Default
    </th>
    
    <th>
      Description
    </th>
  </tr>
</thead>

<tbody>
  <tr>
    <td>
      <code>
        --context
      </code>
    </td>
    
    <td>
      string
    </td>
    
    <td>
      <code>
        $OZ0_CONTEXT or &lt;config dir>/orchestrator-zero/context.json
      </code>
    </td>
    
    <td>
      CLI context file written by server init
    </td>
  </tr>
  
  <tr>
    <td>
      <code>
        --log-level
      </code>
    </td>
    
    <td>
      string
    </td>
    
    <td>
      <code>
        info
      </code>
    </td>
    
    <td>
      log level: debug, info, warn or error
    </td>
  </tr>
</tbody>
</table>

See [all `oz0` commands](https://docs.oz0.ai/reference/cli/oz0) and the [global flags](https://docs.oz0.ai/reference/cli/oz0#global-flags).


## Sitemap

See the full [sitemap](https://docs.oz0.ai/sitemap.md) for all pages.