Role Bindings

The ax role-bindings commands are currently in BETA. The API may change without notice. A one-time warning is emitted on first use.

The ax role-bindings commands let you create, retrieve, update, and delete role bindings on the Arize platform. A role binding assigns a role to a user on a specific resource. Only one binding per user per resource is allowed.

`ax role-bindings list`

List role bindings for the authenticated user’s account. --resource-type is required.

ax role-bindings list --resource-type <type> [--user-id <id>] [--limit <n>] [--cursor <cursor>] [--output <fmt>] [--verbose]

Option	Description
`--resource-type`	Resource type to list bindings for: `SPACE` or `PROJECT` (required)
`--user-id`	Filter by user ID (global ID)
`--limit`, `-l`	Maximum number of role bindings to return (default: 100)
`--cursor`, `-c`	Pagination cursor for next page
`--output`, `-o`	Output format (`table`, `json`, `csv`, `parquet`) or file path
`--verbose`, `-v`	Enable verbose logs

Examples:

ax role-bindings list --resource-type PROJECT
ax role-bindings list --resource-type SPACE --user-id usr_abc123

`ax role-bindings create`

Create a new role binding. Assigns a role to a user on the specified resource. If a binding already exists for the user on the resource, the command exits without error.

ax role-bindings create --user-id <id> --role-id <id> --resource-type <type> --resource-id <id> [--output <fmt>] [--verbose]

Option	Description
`--user-id`	Global ID of the user to bind the role to (required; prompted if omitted)
`--role-id`	Global ID of the role to assign (required; prompted if omitted)
`--resource-type`	Resource type to bind the role on: `SPACE` or `PROJECT` (required; prompted if omitted)
`--resource-id`	Global ID of the resource to bind the role on (required; prompted if omitted)
`--output`, `-o`	Output format (`table`, `json`, `csv`, `parquet`) or file path
`--verbose`, `-v`	Enable verbose logs

Example:

ax role-bindings create \
  --user-id usr_abc123 \
  --role-id role_xyz789 \
  --resource-type PROJECT \
  --resource-id proj_abc123

`ax role-bindings get`

Get a role binding by ID.

ax role-bindings get <binding-id> [--output <fmt>] [--verbose]

Option	Description
`binding-id`	Role binding ID (required positional argument)
`--output`, `-o`	Output format (`table`, `json`, `csv`, `parquet`) or file path
`--verbose`, `-v`	Enable verbose logs

Example:

ax role-bindings get rb_abc123

`ax role-bindings update`

Update a role binding by replacing its assigned role.

ax role-bindings update <binding-id> --role-id <id> [--output <fmt>] [--verbose]

Option	Description
`binding-id`	Role binding ID (required positional argument)
`--role-id`	New role ID to assign (required; prompted if omitted)
`--output`, `-o`	Output format (`table`, `json`, `csv`, `parquet`) or file path
`--verbose`, `-v`	Enable verbose logs

Example:

ax role-bindings update rb_abc123 --role-id role_new789

`ax role-bindings delete`

Delete a role binding by ID. This operation is irreversible.

ax role-bindings delete <binding-id> [--force] [--verbose]

Option	Description
`binding-id`	Role binding ID (required positional argument)
`--force`, `-f`	Skip confirmation prompt
`--verbose`, `-v`	Enable verbose logs

Examples:

ax role-bindings delete rb_abc123
ax role-bindings delete rb_abc123 --force

API reference

API clients

`ax role-bindings list`

`ax role-bindings create`

`ax role-bindings get`

`ax role-bindings update`

`ax role-bindings delete`

​ax role-bindings list

​ax role-bindings create

​ax role-bindings get

​ax role-bindings update

​ax role-bindings delete

`ax role-bindings list`

`ax role-bindings create`

`ax role-bindings get`

`ax role-bindings update`

`ax role-bindings delete`