oz0 tenant removed-account-keys

An API key belongs to its tenant and records who created it.

For: Operators and developers looking up a command.

An API key belongs to its tenant and records who created it. When that person's account is removed (account remove, user remove, or a provisioner), the tenant's keys it created are revoked (revoke, the default), or keep working and are listed for the tenant's admins (finding): oz0 apikey list --created-by-removed, oz0 doctor and the web UI's API keys show them until an admin revokes them. Tenant admins may set it.

Usage

oz0 tenant removed-account-keys <tenant> [revoke|finding] [flags]

Flags

FlagTypeDefaultDescription
--jsonboolprint JSON instead of a table

Inherited flags

FlagTypeDefaultDescription
--contextstring$OZ0_CONTEXT or <config dir>/orchestrator-zero/context.jsonCLI context file written by server init
--log-levelstringinfolog level: debug, info, warn or error

See all oz0 commands and the global flags.

On this page
Copyright © 2026