orl authz effective get
Show what a principal can do right now, part of the orl CLI for OpenRelay GPU VMs, pods, batches and billing. Usage, every flag and an example.
orl authz effective getReturns the permission ids and actions a member, service account or API key holds right now, and the models it may call, after its restrictions apply. Without parameters, answers for the caller. Naming a member, service account or key of the organization needs policy.read. The answer is the principal's role intersected with its key restrictions, role conditions and the organization's guardrails. Network rules are checked against the address of the request you send, not one the named principal would call from.
Flags
| Flag | Type | Required | |
|---|---|---|---|
--principal-type | member, service_account, api_key | no | |
--principal-id | string | no |
This wraps the getEffectiveAccess API operation.
orl authz check-access
Check whether a principal may perform an action, part of the orl CLI for OpenRelay GPU VMs, pods, batches and billing.
orl authz key-setting get
Get the organization's key settings, part of the orl CLI for OpenRelay GPU VMs, pods, batches and billing. Usage, every flag and an example.