Decision Model Access Grant Create

goodmem decision-model access grant create

Create one direct authorization grant

Synopsis

Create one direct grant attached to this decision-model.

The resource kind is fixed and the final positional argument is its UUID. Specify exactly one audience with --principal or --all-authenticated. Resource-oriented create commands accept only EXACT or DIRECT_MEMBERS_OF selectors; use the canonical access-policy command for ANY or OWN.

goodmem decision-model access grant create <decision-model-id> [flags]

Examples

  goodmem decision-model access grant create 70e025f6-76ca-4cbe-b8fc-7dab8e84590a \
    --principal b3303d0a-1a4a-493f-b9bf-38e37153b5a2 \
    --operation READ_DECISION_MODEL --selector EXACT

Options

      --all-authenticated   Grant to every authenticated principal
  -f, --format string       Output format: json, compact, quiet (default "json")
  -h, --help                help for create
      --id string           Optional client-provided authorization-grant UUID
      --operation string    Access-policy operation (for example READ_SPACE)
      --principal string    Principal UUID receiving the grant
      --selector string     Resource selector: EXACT or DIRECT_MEMBERS_OF

Options inherited from parent commands

      --api-key string   API key for authentication (can also be set via GOODMEM_API_KEY environment variable)
      --server string    GoodMem server URL (gRPC API; default ports: https=443, http=80)