Skip to content

Latest commit

 

History

History
169 lines (114 loc) · 4.54 KB

me-group.md

File metadata and controls

169 lines (114 loc) · 4.54 KB

me group

Manage groups in the active space.

A group is a named bundle of members (users and service accounts). Grant access to a group once and every member who is also a space member gets it. Group membership does not by itself make someone a space member: a group's grants (and its admin flag, if it's an admin group) apply to a member only once they've also joined the space directly — so you can add someone to a group before they join, and the access stays dormant until they do.

By default, spaces provision a team group (read on /share, write on /share/projects). Custom-space creation can rename, omit, or create the default group without grants. See Access Control.

These commands require an authenticated credential and operate on the active space.

Commands


me group list

List groups in the active space. Alias: me group ls. The space-admin column marks admin groups (groups whose space-admin authority flows to their members).

me group list

me group mine

List the groups you are a member of in the active space.

me group mine

me group create

Create a group. With --space-admin, the group is created as an admin group: its members who are also space members gain space-admin. Admin-gated.

me group create <name> [--space-admin]
Argument Required Description
name yes Group name.
Option Description
--space-admin Create as an admin group (its members gain space-admin).

me group set-space-admin

Make a group an admin group — its members who are also space members gain space-admin — or revoke that with --off. Admin-gated. Demotion is subject to the space's last-admin safeguard: you cannot demote the group if it is the space's only remaining source of admin.

This is distinct from me group add --admin, which makes a member an admin of the group (managing the group's own membership). set-space-admin is about the group's authority over the space.

me group set-space-admin <group> [--off]
Argument Required Description
group yes Group id or name.
Option Description
--off Revoke the group's admin-group status instead of granting it.

me group rename

Rename a group.

me group rename <group> <new-name>
Argument Required Description
group yes Group id or name.
new-name yes New name.

me group delete

Delete a group. Alias: me group rm.

me group delete <group>
Argument Required Description
group yes Group id or name.

me group add

Add a member (user or service account) to a group. Groups are not nestable — a group cannot be a member of another group; passing a group name or id is rejected.

me group add <group> <member> [--admin]
Argument Required Description
group yes Group id or name.
member yes User or service-account id or name.
Option Description
--admin Make them a group admin (can manage the group's membership).

me group remove

Remove a member from a group. Alias: me group rm-member.

me group remove <group> <member>
Argument Required Description
group yes Group id or name.
member yes User or service-account id or name.

me group members

List a group's members.

me group members <group>
Argument Required Description
group yes Group id or name.

See also

  • me access -- grant a group access to a tree path.
  • Access Control -- group grants, membership, and the authority model.