Skip to content

kindgi people

The tenant's people: add one, list, get, their grants, tenant admin given or taken (grant / ungrant), and remove one.

Add a person to the tenant; prints their id. They can read the tenant's settings at once; give them a project role to work on its agents and runs, and their first key (kindgi tokens create --for=user:<id>). Tenant admins only.

Terminal window
kindgi people add --name=<display-name> [--email=<email>]

Flags:

  • --email <value>: Their email; unique among the tenant's people.
  • --name <value>: Their name, as people see it.

List the tenant's people; --query matches the start of a name. People who were removed are left out unless --include-removed.

Terminal window
kindgi people list [--query=<name-prefix>] [--include-removed] [--limit=<n>] [--cursor=<c>] [--table]

Flags:

  • --cursor <value>: The next page, from nextCursor.
  • --include-removed: People who were removed too, with when (unregisteredAt).
  • --limit <value>: Page size.
  • --query <value>: Only names starting with this.

One person, by id.

Terminal window
kindgi people get <user-id>

What a person may do, as granted directly: tenant admin, tenant member (reads the tenant's settings), project and team roles, the reviewer roster. A tenant admin reads anyone's; anyone else only their own.

Terminal window
kindgi people grants <user-id> [--table]

Make a person a tenant admin, before it answers: their next request holds it. Tenant admins only.

Terminal window
kindgi people grant <user-id> --tenant-admin

Flags:

  • --tenant-admin: Tenant admin.

Remove tenant admin from a person. Refused for the only person who holds it (make someone else one first) and for the seed user (unset KINDGI_SEED_USER_ID and restart the runtime first). Tenant admins only.

Terminal window
kindgi people ungrant <user-id> --tenant-admin

Flags:

  • --tenant-admin: Tenant admin.

Remove a person from the tenant: every API key and session of theirs is revoked, and every role and membership taken away, before it answers (their keys get 401 at once). Their record stays, so their history still says who they were; their email is free again (adding it makes a new person). Refused for yourself, the seed user and the only tenant admin. Tenant admins only.

Terminal window
kindgi people remove <user-id>

Every command also takes the global flags.