oz0 tenant provisioner allow

Usage and flags for oz0 tenant provisioner allow.

For: Operators and developers looking up a command.

Let provisioner NAME give the tenant's memberships, each up to --up-to (reader, operator, admin or owner; default operator: a role set's role counts by its permissions), and the content permission with --content. It replaces the tenant's earlier allowance for NAME. Audited provisioner.tenant.allow.

Usage

oz0 tenant provisioner allow NAME --tenant ID [--up-to ROLE] [--content] [flags]

Flags

FlagTypeDefaultDescription
--contentboolit may give the content permission too
--jsonboolprint JSON instead of a table
--tenantstringthe default tenantthe tenant
--up-tostringoperatorthe highest role it may give: reader, operator, admin or owner

Inherited flags

FlagTypeDefaultDescription
--contextstring$OZ0_CONTEXT or <config dir>/orchestrator-zero/context.jsonCLI context file written by server init
--log-levelstringinfolog level: debug, info, warn or error

See all oz0 commands and the global flags.

On this page
Copyright © 2026