Skip to content

stratumctl groups

Manage IAM groups

Terminal window
stratumctl groups [flags]

Aliases: group

Add a user to a group

Terminal window
stratumctl groups add-member <group-id> <user-id> [flags]
Terminal window
stratumctl groups add-member g-5k8m2x7q9a u-alice

Create a group

Terminal window
stratumctl groups create --name <n> [flags]
Terminal window
stratumctl groups create --name platform-eng
stratumctl groups create --name platform-eng --description "Platform engineers"
Flag Type Default Description
--description string description
--name string group name (required)

Delete a group (cascades members, bindings, attachments)

Terminal window
stratumctl groups delete <group-id> [flags]
Terminal window
stratumctl groups delete g-5k8m2x7q9a

Show a group

Terminal window
stratumctl groups get <group-id> [flags]
Terminal window
stratumctl groups get g-5k8m2x7q9a
stratumctl groups get g-5k8m2x7q9a --output json

Grant a role to a group (members inherit)

Terminal window
stratumctl groups grant-role <group-id> --role <r> --scope-type <t> --scope-id <id> [flags]
Terminal window
stratumctl groups grant-role g-5k8m2x7q9a --role project-admin --scope-type project --scope-id p-team-a
Flag Type Default Description
--role string role name (required)
--scope-id string scope id (required)
--scope-type string organization | project | install (required)

List groups

Terminal window
stratumctl groups list [flags]
Terminal window
stratumctl groups list
stratumctl groups list --output json

Remove a user from a group

Terminal window
stratumctl groups remove-member <group-id> <user-id> [flags]
Terminal window
stratumctl groups remove-member g-5k8m2x7q9a u-alice

Revoke a group role binding

Terminal window
stratumctl groups revoke-role <group-id> <role-binding-id> [flags]
Terminal window
stratumctl groups revoke-role g-5k8m2x7q9a rb-7k2m9x4q8a