oz0 tenant review-widening

A change that widens what a tenant's sandboxes may reach waits as a change request (see oz0 change).

For: Operators and developers looking up a command.

A change that widens what a tenant's sandboxes may reach waits as a change request (see oz0 change). With confirm, the default, the admin who asked may approve it after seeing its delta, explicitly; with second_admin, an admin other than the requester must, which the docs recommend to regulated tenants. Tenant admins set it, and only an owner relaxes second_admin to confirm. It is audited (tenant.review_widening).

Usage

oz0 tenant review-widening <tenant> [confirm|second_admin] [flags]

Flags

FlagTypeDefaultDescription
--decision-refstringthe decision or case the change follows, such as a case number (at most 200 characters)
--jsonboolprint JSON instead of a table
--reasonstringwhy, required for every governance change (at most 500 characters; default $OZ0_REASON); the audit log keeps it

Inherited flags

FlagTypeDefaultDescription
--contextstring$OZ0_CONTEXT or <config dir>/orchestrator-zero/context.jsonCLI context file written by server init
--log-levelstringinfolog level: debug, info, warn or error

See all oz0 commands and the global flags.

On this page
Copyright © 2026