AXHubAXHub
⌘K

Governance & access

Access, members, invitations, ABAC authorization, and audit log commands

axhub access

Check your access to an app.

FlagTypeDescriptionDefault
--argsstring——

axhub members

Manage company members.

axhub members deactivate

Deactivate a member.

FlagTypeDescriptionDefault
--dry-runboolean—true
--executeboolean——
--memberstring——
--tenantstring——
--yes -yboolean——

axhub members list

List members.

FlagTypeDescriptionDefault
--tenantstring——

axhub members me

Show your own membership.

FlagTypeDescriptionDefault
--tenantstring——

axhub members reactivate

Reactivate a member.

FlagTypeDescriptionDefault
--dry-runboolean—true
--executeboolean——
--memberstring——
--tenantstring——
--yes -yboolean——

axhub members resolve

Resolve a member by email or id.

FlagTypeDescriptionDefault
--emailstring——
--tenantstring——

axhub members set-role

Change a member's role.

FlagTypeDescriptionDefault
--dry-runboolean—true
--executeboolean——
--memberstring——
--rolestring——
--tenantstring——

axhub invitations

Manage company invitations.

axhub invitations bulk

Invite multiple people at once.

FlagTypeDescriptionDefault
--dry-runboolean—true
--executeboolean——
--from-filestring——
--rolestring—member
--strictboolean——
--tenantstring——

axhub invitations cancel

Cancel an invitation.

FlagTypeDescriptionDefault
--dry-runboolean—true
--executeboolean——
--idstring——
--tenantstring——
--yes -yboolean——

axhub invitations list

List invitations.

FlagTypeDescriptionDefault
--expires-withinstring——
--statusstring——
--tenantstring——

axhub invitations resend

Resend an invitation.

FlagTypeDescriptionDefault
--dry-runboolean—true
--executeboolean——
--idstring——
--rolestring——
--tenantstring——
--yes -yboolean——

axhub invitations send

Send an invitation.

FlagTypeDescriptionDefault
--emailstring——
--rolestring—member
--tenantstring——

axhub authz

Manage ABAC authorization (subjects, tags, grants).

axhub authz grants

Manage grants.

axhub authz grants grant

Grant access.

FlagTypeDescriptionDefault
--actions-filestring——
--actions-jsonstring——
--dry-runboolean—true
--executeboolean——
--grant_idstring——
--reasonstring——
--tenantstring——

axhub authz grants list

List grants.

FlagTypeDescriptionDefault
--granted-onlyboolean——
--kindstring——
--limitintegerMatrix row cap forwarded to the backend (expected 1-2000). Omitting uses the backend default, which changed from 100 to 500 in the v0.17 backend (PR #172).—
--resource-tag-idstring——
--subject-tag-idstring——
--tenantstring——

axhub authz grants revoke

Revoke a grant.

FlagTypeDescriptionDefault
--dry-runboolean—true
--executeboolean——
--grant_idstring——
--reasonstring——
--tenantstring——

axhub authz grants show

Show a grant.

FlagTypeDescriptionDefault
--grant_idstring——
--tenantstring——

axhub authz grants update-actions

Update a grant's allowed actions.

FlagTypeDescriptionDefault
--actions-filestring——
--actions-jsonstring——
--dry-runboolean—true
--executeboolean——
--grant_idstring——
--reasonstring——
--tenantstring——

axhub authz subjects

Manage authorization subjects.

axhub authz subjects create

Create a subject.

FlagTypeDescriptionDefault
--attributes-filestring——
--attributes-jsonstring——
--dry-runboolean—true
--executeboolean——
--namestring——
--parent-idstring——
--sort-orderstring——
--tenantstring——
--typestring——
--user-idstring——

axhub authz subjects delete

Delete a subject.

FlagTypeDescriptionDefault
--dry-runboolean—true
--executeboolean——
--subject_idstring——
--tenantstring——

axhub authz subjects list

List subjects.

FlagTypeDescriptionDefault
--parent-idstring——
--tenantstring——

axhub authz subjects move

Move a subject.

FlagTypeDescriptionDefault
--dry-runboolean—true
--executeboolean——
--parent-idstring——
--rootbooleanMove the subject to the tenant root—
--subject_idstring——
--tenantstring——

axhub authz subjects tag-attach

Attach a tag to a subject.

FlagTypeDescriptionDefault
--dry-runboolean—true
--executeboolean——
--subject_idstring——
--tag-idstring——
--tenantstring——

axhub authz subjects tag-detach

Detach a tag from a subject.

FlagTypeDescriptionDefault
--dry-runboolean—true
--executeboolean——
--subject_idstring——
--tag-idstring——
--tenantstring——

axhub authz subjects update

Update a subject.

FlagTypeDescriptionDefault
--attributes-filestring——
--attributes-jsonstring——
--dry-runboolean—true
--executeboolean——
--namestring——
--sort-orderstring——
--subject_idstring——
--tenantstring——

axhub authz tags

Manage authorization tags.

axhub authz tags create

Create a tag.

FlagTypeDescriptionDefault
--descriptionstring——
--dry-runboolean—true
--executeboolean——
--kindstring——
--namestring——
--sensitivitystring——
--tenantstring——

axhub authz tags delete

Delete a tag.

FlagTypeDescriptionDefault
--dry-runboolean—true
--executeboolean——
--tag_idstring——
--tenantstring——

axhub authz tags list

List tags.

FlagTypeDescriptionDefault
--kindstringFilter tags by backend kind (subject or resource)—
--tenantstringTenant id/slug/name override. Defaults to the active tenant membership—

axhub authz tags update

Update a tag.

FlagTypeDescriptionDefault
--descriptionstring——
--dry-runboolean—true
--executeboolean——
--namestring——
--sensitivitystring——
--tag_idstring——
--tenantstring——

axhub audit

View the audit log.

FlagTypeDescriptionDefault
--argsstring——

axhub email-domains

Manage company email domain policy.

axhub email-domains add

Add an allowed domain.

FlagTypeDescriptionDefault
--domainstring——
--tenantstring——

axhub email-domains check

Check whether a domain is allowed.

FlagTypeDescriptionDefault
--emailstring——
--tenantstring——

axhub email-domains list

List allowed domains.

FlagTypeDescriptionDefault
--tenantstring——

axhub email-domains remove

Remove an allowed domain.

FlagTypeDescriptionDefault
--domainstring——
--dry-runboolean—true
--executeboolean——
--tenantstring——
--yes -yboolean——