User Enrollment Create

goodmem user enrollment create

Create or rotate a human user's enrollment credential

Synopsis

Create a short-lived, one-time enrollment credential for an existing dormant human.

The raw credential is disclosed once. Use --rotate-existing to atomically revoke a still-open credential and replace it. An expired credential is replaced without that flag.

goodmem user enrollment create <user-id> [flags]

Examples

  # Create an enrollment with a server-generated UUID
  goodmem user enrollment create 70e025f6-76ca-4cbe-b8fc-7dab8e84590a

  # Rotate the user's current enrollment using an inspectable client UUID
  goodmem user enrollment create 70e025f6-76ca-4cbe-b8fc-7dab8e84590a \
    --id 0198b9f4-c42f-7ae3-8c56-44d827ea03bd --rotate-existing

Options

  -f, --format string     Output format: table, json, compact, quiet (default "table")
  -h, --help              help for create
      --id string         Optional client-provided enrollment UUID
  -q, --quiet             Output only the one-time enrollment credential
      --rotate-existing   Revoke and replace the user's current open enrollment

Options inherited from parent commands

      --api-key string   API key for authentication (can also be set via GOODMEM_API_KEY environment variable)
      --server string    GoodMem server address (gRPC API)