CLICommands
orl authz check-access
Check whether a principal may perform an action, part of the orl CLI for OpenRelay GPU VMs, pods, batches and billing.
orl authz check-access --action <action> --principal-id <principal-id> --principal-type <principal-type>Evaluates one action for a member, service account or key of the organization and returns the decision, the layer that decided it and the deciding policies.
Flags
| Flag | Type | Required | |
|---|---|---|---|
--action | string | yes | An action from the catalog, e.g. compute.create. |
--endpoint-id | string | no | The dedicated endpoint the model is served on. |
--model | string | no | The model to check for inference.invoke. |
--principal-id | string | yes | A user id, service account id or API key id of this organization. |
--principal-type | member, service_account, api_key | yes | |
--source-ip | string | no | Evaluate as if the request came from this address. Defaults to yours. |
--body | string | no | a JSON object of request body fields, merged under any of this command's own flags that are also set, e.g. {"key":"value"} |
--body-file | string | no | read the --body JSON object from a file (- for stdin) |
This wraps the checkAccess API operation.
orl auth status
Show where credentials come from and whether they work, part of the orl CLI for OpenRelay GPU VMs, pods, batches and billing.
orl authz effective get
Show what a principal can do right now, part of the orl CLI for OpenRelay GPU VMs, pods, batches and billing. Usage, every flag and an example.