pulumi org member edit | CLI commands

[EXPERIMENTAL] Modify a member’s role within an organization

Synopsis

[EXPERIMENTAL] Modify a member’s role within an organization.

Updates the role assigned to an organization member. Pass –role to assign one of the built-in roles (member, admin, or billing-manager), –fga-role-name to assign a custom role by name, or –fga-role-id to assign by ID. These flags are mutually exclusive.

Default output is a human-readable summary; pass –output=json for the raw member record as JSON.

pulumi org member edit <user-login> [flags]

Examples

  # Promote a member to admin
  pulumi org member edit alice --role admin

  # Assign a custom role by name
  pulumi org member edit alice --fga-role-name "Developer"

  # Assign a custom role by ID
  pulumi org member edit alice --fga-role-id role-abc123

Options

      --fga-role-id string     The custom role to assign (by ID)
      --fga-role-name string   The custom role to assign (by name; resolved to ID automatically)
  -h, --help                   help for edit
      --org string             The organization that owns the member
      --output string          Output format. Supported values are: default and json (default "default")
      --role string            The built-in role to assign: member, admin, or billing-manager

Options inherited from parent commands

      --color string                 Colorize output. Choices are: always, never, raw, auto (default "auto")
  -C, --cwd string                   Run pulumi as if it had been started in another directory
      --disable-integrity-checking   Disable integrity checking of checkpoint files
  -e, --emoji                        Enable emojis in the output
  -Q, --fully-qualify-stack-names    Show fully-qualified stack names
      --logflow                      Flow log settings to child processes (like plugins)
      --logtostderr                  Log to stderr instead of to files
      --memprofilerate int           Enable more precise (and expensive) memory allocation profiles by setting runtime.MemProfileRate
      --non-interactive              Disable interactive mode for all commands
      --otel-traces string           Export OpenTelemetry traces to the specified endpoint. Use file:// for local JSON files, grpc:// for remote collectors
      --profiling string             Emit CPU and memory profiles and an execution trace to '[filename].[pid].{cpu,mem,trace}', respectively
      --tracing file:                Emit tracing to the specified endpoint. Use the file: scheme to write tracing data to a local file
  -v, --verbose int                  Enable verbose logging (e.g., v=3); anything >3 is very verbose

SEE ALSO

• pulumi org member - [EXPERIMENTAL] Manage organization members