cpln org [SUBCOMMAND]
Commands:
cpln org access-report <ref> Show the access report for the referenced organization
cpln org audit [ref] Retrieve audit trail events for the referenced organization
cpln org create Create a new organization
cpln org edit <ref> Edit the referenced organization, as YAML, within an editor
cpln org eventlog <ref> Show the event log of the referenced organization [aliases: log]
cpln org get [ref...] Retrieve one or more referenced organizations
cpln org patch <ref> Update the referenced organization's metadata using an input file
cpln org permissions Show the grantable permissions for an organization object type
cpln org query Find all the organizations based on the given query
cpln org tag <ref...> Manage the tags belonging to one or more referenced organizations
cpln org update <ref> Update properties of the referenced organization
Options:
--help Show help [boolean]
org access-report
Show the access report for the referenced organization Usagecpln org access-report <ref> [OPTIONS]
Reference
Reference
Positionals:
ref The resource reference. Usually it is the name of the resource. [required]
Context options:
--profile Override the profile. The default profile can be set using the `cpln profile set-default` command or by setting the CPLN_PROFILE environment variable
Format options:
--output, -o Set the output format [choices: "text", "json", "yaml", "json-slim", "yaml-slim", "tf", "crd", "names"]
--color Colorize the output [boolean] [default: true]
--ts Timestamp format if the output format is text (e.g., --output=text) [choices: "iso", "local", "age"]
--max Maximum number of records to show. A value less than 1 will return all records. [number] [default: 50]
Request options:
--token Override the authorization token
--endpoint Override the API URL
--insecure, -k Ignore TLS errors [boolean]
Debug options:
--verbose, -v Enable verbose output to stderr [boolean] [default: false]
--debug, -d Show all HTTP communications [boolean] [default: false]
Options:
--help Show help [boolean]
Example
Example
cpln org access-report demo-cpln-organization
+-----------------+--------------------------------------------------------+--------+
|PERMISSION |PRINCIPAL |GRANTED |
|-----------------|--------------------------------------------------------|--------|
|edit |/org/demo-cpln-organization/group/superusers |manage |
|edit |/org/demo-cpln-organization/serviceaccount/controlplane |manage |
|exec |/org/demo-cpln-organization/group/superusers |manage |
|exec |/org/demo-cpln-organization/serviceaccount/controlplane |manage |
|exec.echo |/org/demo-cpln-organization/group/superusers |manage |
|exec.echo |/org/demo-cpln-organization/serviceaccount/controlplane |manage |
|grafanaAdmin |/org/demo-cpln-organization/group/superusers |manage |
|grafanaAdmin |/org/demo-cpln-organization/serviceaccount/controlplane |manage |
|manage |/org/demo-cpln-organization/group/superusers |manage |
|manage |/org/demo-cpln-organization/serviceaccount/controlplane |manage |
|readLogs |/org/demo-cpln-organization/group/superusers |manage |
|readLogs |/org/demo-cpln-organization/serviceaccount/controlplane |manage |
|readMetrics |/org/demo-cpln-organization/group/superusers |manage |
|readMetrics |/org/demo-cpln-organization/serviceaccount/controlplane |manage |
|readUsage |/org/demo-cpln-organization/group/superusers |manage |
|readUsage |/org/demo-cpln-organization/serviceaccount/controlplane |manage |
|view |/org/demo-cpln-organization/group/superusers |manage |
|view |/org/demo-cpln-organization/serviceaccount/controlplane |manage |
|view |/org/demo-cpln-organization/group/-allmembers |view |
|viewAccessReport |/org/demo-cpln-organization/group/superusers |manage |
|viewAccessReport |/org/demo-cpln-organization/serviceaccount/controlplane |manage |
+-----------------+--------------------------------------------------------+--------+
org audit
Retrieve audit trail events for the referenced organization Usagecpln org audit [ref] [OPTIONS]
Reference
Reference
Positionals:
ref The resource reference. Usually it is the name of the resource.
Command options:
--subject Filter by subject (serviceaccount name or user email) [string]
--context Audit context name (the 'cpln' context displays Control Plane actions) [string] [default: "cpln"]
--since Relative lookback window from now (e.g., 1h, 24h, 7d). Mutually exclusive with --from/--to [string] [default: "7d"]
--from Start time for audit events (ISO 8601 format or relative duration, e.g., 2025-10-23T07:00:00Z, 7d, 1h). Cannot be used with --since [string]
--to End time for audit events (ISO 8601 format or relative duration, e.g., 2025-10-23T07:00:00Z, 1d, 30m) [string]
Context options:
--profile Override the profile. The default profile can be set using the `cpln profile set-default` command or by setting the CPLN_PROFILE environment variable
Format options:
--output, -o Set the output format [choices: "text", "json", "yaml", "json-slim", "yaml-slim", "tf", "crd", "names"]
--color Colorize the output [boolean] [default: true]
--ts Timestamp format if the output format is text (e.g., --output=text) [choices: "iso", "local", "age"]
--max Maximum number of records to show. A value less than 1 will return all records. [number] [default: 50]
Request options:
--token Override the authorization token
--endpoint Override the API URL
--insecure, -k Ignore TLS errors [boolean]
Debug options:
--verbose, -v Enable verbose output to stderr [boolean] [default: false]
--debug, -d Show all HTTP communications [boolean] [default: false]
Options:
--help Show help [boolean]
org create
Create a new organization Usagecpln org create --name ORG_NAME [OPTIONS]
Reference
Reference
Command options:
--accountId Id of the billing account [required]
--name Name of the new organization [required]
--description, --desc Optional description, defaults to the name if not set
--invitee Emails of users to invite to the org as superuser(admin) [required]
--tag Attach tags (e.g., --tag drink=water)
Context options:
--profile Override the profile. The default profile can be set using the `cpln profile set-default` command or by setting the CPLN_PROFILE environment variable
Format options:
--output, -o Set the output format [choices: "text", "json", "yaml", "json-slim", "yaml-slim", "tf", "crd", "names"]
--color Colorize the output [boolean] [default: true]
--ts Timestamp format if the output format is text (e.g., --output=text) [choices: "iso", "local", "age"]
--max Maximum number of records to show. A value less than 1 will return all records. [number] [default: 50]
Request options:
--token Override the authorization token
--endpoint Override the API URL
--insecure, -k Ignore TLS errors [boolean]
Debug options:
--verbose, -v Enable verbose output to stderr [boolean] [default: false]
--debug, -d Show all HTTP communications [boolean] [default: false]
Options:
--help Show help [boolean]
Options
Options
name- Minimum Length: 3
- Maximum Length: 64
- Only lowercase characters
- Must begin with a character
- Allowed special characters: -
Example
Example
cpln org create --name demo-cpln-organization --acountId ACCOUNT_ID --invitee EMAIL
If successful, the new organization will be created.
org edit
Edit the referenced organization, as YAML, within an editor Usagecpln org edit <ref> [OPTIONS]
The default editor can be set by using the EDITOR environment variable.
Reference
Reference
Positionals:
ref The resource reference. Usually it is the name of the resource. [required]
Command options:
--replace, -r Replace instead of patch/merge [boolean] [default: false]
Context options:
--profile Override the profile. The default profile can be set using the `cpln profile set-default` command or by setting the CPLN_PROFILE environment variable
Format options:
--output, -o Set the output format [choices: "text", "json", "yaml", "json-slim", "yaml-slim", "tf", "crd", "names"]
--color Colorize the output [boolean] [default: true]
--ts Timestamp format if the output format is text (e.g., --output=text) [choices: "iso", "local", "age"]
--max Maximum number of records to show. A value less than 1 will return all records. [number] [default: 50]
Request options:
--token Override the authorization token
--endpoint Override the API URL
--insecure, -k Ignore TLS errors [boolean]
Debug options:
--verbose, -v Enable verbose output to stderr [boolean] [default: false]
--debug, -d Show all HTTP communications [boolean] [default: false]
Options:
--help Show help [boolean]
Example
Example
cpln org edit demo-cpln-organization
Your default editor will be launched.
Once any modifications are saved, the updates will be sent to the API.
org eventlog
Show the event log of the referenced organization Usagecpln org eventlog <ref> [OPTIONS]
Reference
Reference
Positionals:
ref The resource reference. Usually it is the name of the resource. [required]
Context options:
--profile Override the profile. The default profile can be set using the `cpln profile set-default` command or by setting the CPLN_PROFILE environment variable
Format options:
--output, -o Set the output format [choices: "text", "json", "yaml", "json-slim", "yaml-slim", "tf", "crd", "names"]
--color Colorize the output [boolean] [default: true]
--ts Timestamp format if the output format is text (e.g., --output=text) [choices: "iso", "local", "age"]
--max Maximum number of records to show. A value less than 1 will return all records. [number] [default: 50]
Request options:
--token Override the authorization token
--endpoint Override the API URL
--insecure, -k Ignore TLS errors [boolean]
Debug options:
--verbose, -v Enable verbose output to stderr [boolean] [default: false]
--debug, -d Show all HTTP communications [boolean] [default: false]
Options:
--help Show help [boolean]
Example
Example
cpln org eventlog demo-cpln-organization
The event log for the referenced organization will be shown.
org get
Retrieve one or more referenced organizations Usagecpln org get [ref...] [OPTIONS]
An empty reference will return all references
Reference
Reference
Positionals:
ref One or more resource references. Usually it is the name of the resource. [array] [default: []]
Context options:
--profile Override the profile. The default profile can be set using the `cpln profile set-default` command or by setting the CPLN_PROFILE environment variable
Format options:
--output, -o Set the output format [choices: "text", "json", "yaml", "json-slim", "yaml-slim", "tf", "crd", "names"]
--color Colorize the output [boolean] [default: true]
--ts Timestamp format if the output format is text (e.g., --output=text) [choices: "iso", "local", "age"]
--max Maximum number of records to show. A value less than 1 will return all records. [number] [default: 50]
Request options:
--token Override the authorization token
--endpoint Override the API URL
--insecure, -k Ignore TLS errors [boolean]
Debug options:
--verbose, -v Enable verbose output to stderr [boolean] [default: false]
--debug, -d Show all HTTP communications [boolean] [default: false]
Options:
--help Show help [boolean]
Example
Example
- Get all organizations
cpln org get
+-----------------------+------------------+----------------------------+----------------------+
|NAME |DESCRIPTION |LINK |TAGS |
|-----------------------|------------------|----------------------------|----------------------|
|demo-cpln-organization |Demo Organization |/org/demo-cpln-organization |demo-key="demo-value" |
| | | |type="demo" |
+-----------------------+------------------+----------------------------+----------------------+
- Get one organization
cpln org get demo-cpln-organization
+-----------------------+------------------+----------------------------+----------------------+
|NAME |DESCRIPTION |LINK |TAGS |
|-----------------------|------------------|----------------------------|----------------------|
|demo-cpln-organization |Demo Organization |/org/demo-cpln-organization |demo-key="demo-value" |
| | | |type="demo" |
+-----------------------+------------------+----------------------------+----------------------+
org patch
Update the referenced organization’s metadata using an input file Usagecpln org patch <ref> --file FILE_NAME [OPTIONS]
Running this command with the option
--file - sets the input to stdin. The input is required to be a valid JSON or YAML string (e.g., {"description": "My new description"} or description: My new description). To complete the update, press Control-D (or Control-Z if you are using Windows).Reference
Reference
Positionals:
ref The resource reference. Usually it is the name of the resource. [required]
Command options:
--file, -f File to load the patch from. Use `--file -` to enable input from stdin. [required]
Context options:
--profile Override the profile. The default profile can be set using the `cpln profile set-default` command or by setting the CPLN_PROFILE environment variable
Format options:
--output, -o Set the output format [choices: "text", "json", "yaml", "json-slim", "yaml-slim", "tf", "crd", "names"]
--color Colorize the output [boolean] [default: true]
--ts Timestamp format if the output format is text (e.g., --output=text) [choices: "iso", "local", "age"]
--max Maximum number of records to show. A value less than 1 will return all records. [number] [default: 50]
Request options:
--token Override the authorization token
--endpoint Override the API URL
--insecure, -k Ignore TLS errors [boolean]
Debug options:
--verbose, -v Enable verbose output to stderr [boolean] [default: false]
--debug, -d Show all HTTP communications [boolean] [default: false]
Options:
--help Show help [boolean]
Example
Example
cpln org patch demo-cpln-organization --file update.json
The changes within the JSON file will be performed against the referenced organization.
org permissions
Show the grantable permissions for an organization object type Usagecpln org permissions [OPTIONS]
Reference
Reference
Context options:
--profile Override the profile. The default profile can be set using the `cpln profile set-default` command or by setting the CPLN_PROFILE environment variable
Format options:
--output, -o Set the output format [choices: "text", "json", "yaml", "json-slim", "yaml-slim", "tf", "crd", "names"]
--color Colorize the output [boolean] [default: true]
--ts Timestamp format if the output format is text (e.g., --output=text) [choices: "iso", "local", "age"]
--max Maximum number of records to show. A value less than 1 will return all records. [number] [default: 50]
Request options:
--token Override the authorization token
--endpoint Override the API URL
--insecure, -k Ignore TLS errors [boolean]
Debug options:
--verbose, -v Enable verbose output to stderr [boolean] [default: false]
--debug, -d Show all HTTP communications [boolean] [default: false]
Options:
--help Show help [boolean]
Example
Example
cpln org permissions
+-----------------+-----------------------------------------+------------------------------------------------------------------------------------------------------+
|NAME |DESCRIPTION |IMPLIES |
|-----------------|-----------------------------------------|------------------------------------------------------------------------------------------------------|
|edit |Modify org |view |
|exec |Grantees can execute all commands on ... |exec.echo |
|exec.echo |Grantees can execute the echo command | |
|grafanaAdmin |Grantees are made Admin in Grafana, o... | |
|manage |Full access |edit, exec, exec.echo, grafanaAdmin, manage, readLogs, readMetrics, readUsage, view, viewAccessReport |
|readLogs |Grantees can read logs from all workl... |view |
|readMetrics |Grantees can access usage and perform... | |
|readUsage |Grantees can access usage and billing... | |
|view |Read-only view: every org member can ... | |
|viewAccessReport |Grantees can inspect the granted acce... | |
+-----------------+-----------------------------------------+------------------------------------------------------------------------------------------------------+
org query
Find all the organizations based on the given query Usagecpln org query QUERY_OPTIONS [OPTIONS]
Reference
Reference
Query options:
--match Query filter type [choices: "all", "none", "any"] [default: "all"]
--property, --prop Property to query
--tag Tag to query
--rel Relation to query
Context options:
--profile Override the profile. The default profile can be set using the `cpln profile set-default` command or by setting the CPLN_PROFILE environment variable
Format options:
--output, -o Set the output format [choices: "text", "json", "yaml", "json-slim", "yaml-slim", "tf", "crd", "names"]
--color Colorize the output [boolean] [default: true]
--ts Timestamp format if the output format is text (e.g., --output=text) [choices: "iso", "local", "age"]
--max Maximum number of records to show. A value less than 1 will return all records. [number] [default: 50]
Request options:
--token Override the authorization token
--endpoint Override the API URL
--insecure, -k Ignore TLS errors [boolean]
Debug options:
--verbose, -v Enable verbose output to stderr [boolean] [default: false]
--debug, -d Show all HTTP communications [boolean] [default: false]
Options:
--help Show help [boolean]
Example
Example
Use the
--match option to display all, none, or any of the results based on a given property or tag- Search for an organization based on the name property
cpln org query --match any --prop name=demo-cpln-organization
+-----------------------+------------------+----------------------------+----------------------+
|NAME |DESCRIPTION |LINK |TAGS |
|-----------------------|------------------|----------------------------|----------------------|
|demo-cpln-organization |Demo Organization |/org/demo-cpln-organization |demo-key="demo-value" |
| | | |type="demo" |
+-----------------------+------------------+----------------------------+----------------------+
- Search for an organization based on the description property
cpln org query --match any --prop description="Demo Organization"
+-----------------------+------------------+----------------------------+----------------------+
|NAME |DESCRIPTION |LINK |TAGS |
|-----------------------|------------------|----------------------------|----------------------|
|demo-cpln-organization |Demo Organization |/org/demo-cpln-organization |demo-key="demo-value" |
| | | |type="demo" |
+-----------------------+------------------+----------------------------+----------------------+
- Search for an organization based on a tag
cpln org query --match any --tag type=demo
+-----------------------+------------------+----------------------------+----------------------+
|NAME |DESCRIPTION |LINK |TAGS |
|-----------------------|------------------|----------------------------|----------------------|
|demo-cpln-organization |Demo Organization |/org/demo-cpln-organization |demo-key="demo-value" |
| | | |type="demo" |
+-----------------------+------------------+----------------------------+----------------------+
- Search for an organization based on a property and tag
cpln org query --match any --prop description="Demo Organization" --tag type=demo
+-----------------------+------------------+----------------------------+----------------------+
|NAME |DESCRIPTION |LINK |TAGS |
|-----------------------|------------------|----------------------------|----------------------|
|demo-cpln-organization |Demo Organization |/org/demo-cpln-organization |demo-key="demo-value" |
| | | |type="demo" |
+-----------------------+------------------+----------------------------+----------------------+
org tag
Manage the tags belonging to one or more referenced organizations Usagecpln org tag <ref...> --tag KEY=VALUE [OPTIONS]
Built-in tags, which begin with cpln/*, can’t be modified.
Reference
Reference
Positionals:
ref One or more resource references. Usually it is the name of the resource. [array] [required] [default: []]
Command options:
--tag Attach tags (e.g., --tag drink=water)
--remove-tag Remove tags (e.g., --remove-tag tagname)
Context options:
--profile Override the profile. The default profile can be set using the `cpln profile set-default` command or by setting the CPLN_PROFILE environment variable
Format options:
--output, -o Set the output format [choices: "text", "json", "yaml", "json-slim", "yaml-slim", "tf", "crd", "names"]
--color Colorize the output [boolean] [default: true]
--ts Timestamp format if the output format is text (e.g., --output=text) [choices: "iso", "local", "age"]
--max Maximum number of records to show. A value less than 1 will return all records. [number] [default: 50]
Request options:
--token Override the authorization token
--endpoint Override the API URL
--insecure, -k Ignore TLS errors [boolean]
Debug options:
--verbose, -v Enable verbose output to stderr [boolean] [default: false]
--debug, -d Show all HTTP communications [boolean] [default: false]
Options:
--help Show help [boolean]
Example
Example
- Add a tag
cpln org tag demo-cpln-organization --tag drink=water
+-----------------------+------------------+----------------------------+----------------------+
|NAME |DESCRIPTION |LINK |TAGS |
|-----------------------|------------------|----------------------------|----------------------|
|demo-cpln-organization |Demo Organization |/org/demo-cpln-organization |demo-key="demo-value" |
| | | |drink="water" |
| | | |type="demo" |
+-----------------------+------------------+----------------------------+----------------------+
- Update same tag (after running the example above)
cpln org tag demo-cpln-organization --tag drink=coffee
+-----------------------+------------------+----------------------------+----------------------+
|NAME |DESCRIPTION |LINK |TAGS |
|-----------------------|------------------|----------------------------|----------------------|
|demo-cpln-organization |Demo Organization |/org/demo-cpln-organization |demo-key="demo-value" |
| | | |drink="coffee" |
| | | |type="demo" |
+-----------------------+------------------+----------------------------+----------------------+
- Remove tag (after running the example above)
cpln org tag demo-cpln-organization --remove drink
+-----------------------+------------------+----------------------------+----------------------+
|NAME |DESCRIPTION |LINK |TAGS |
|-----------------------|------------------|----------------------------|----------------------|
|demo-cpln-organization |Demo Organization |/org/demo-cpln-organization |demo-key="demo-value" |
| | | |type="demo" |
+-----------------------+------------------+----------------------------+----------------------+
org update
Update properties of the referenced organization Usagecpln org update <ref> --set UPDATE_PROPERTY [OPTIONS]
Reference
Reference
Positionals:
ref The resource reference. Usually it is the name of the resource. [required]
Update Properties:
--set Update the following properties (e.g., --set description="Updated Description"):
description string
tags.<key> string
--unset Unset a property (same paths as --set, e.g., --unset description)
Context options:
--profile Override the profile. The default profile can be set using the `cpln profile set-default` command or by setting the CPLN_PROFILE environment variable
Format options:
--output, -o Set the output format [choices: "text", "json", "yaml", "json-slim", "yaml-slim", "tf", "crd", "names"]
--color Colorize the output [boolean] [default: true]
--ts Timestamp format if the output format is text (e.g., --output=text) [choices: "iso", "local", "age"]
--max Maximum number of records to show. A value less than 1 will return all records. [number] [default: 50]
Request options:
--token Override the authorization token
--endpoint Override the API URL
--insecure, -k Ignore TLS errors [boolean]
Debug options:
--verbose, -v Enable verbose output to stderr [boolean] [default: false]
--debug, -d Show all HTTP communications [boolean] [default: false]
Options:
--help Show help [boolean]
Options
Options
- The
--setoption allows the modification of the following organization properties:description- Description of the organization
- Type: string
tags- Tags (key=value) associated with the organization
- Type: string
Example
Example
- For the examples below, the initial organization is configured as:
+-----------------------+------------------+----------------------------+----------------------+
|NAME |DESCRIPTION |LINK |TAGS |
|-----------------------|------------------|----------------------------|----------------------|
|demo-cpln-organization |Demo Organization |/org/demo-cpln-organization |demo-key="demo-value" |
| | | |type="demo" |
+-----------------------+------------------+----------------------------+----------------------+
- Update an organization’s description
cpln org update demo-cpln-organization --set description="new description"
+-----------------------+----------------+----------------------------+----------------------+
|NAME |DESCRIPTION |LINK |TAGS |
|-----------------------|----------------|----------------------------|----------------------|
|demo-cpln-organization |new description |/org/demo-cpln-organization |demo-key="demo-value" |
| | | |type="demo" |
+-----------------------+----------------+----------------------------+----------------------+
- Update an organization’s tag
cpln org update demo-cpln-organization --set tags.demo-key=demo-value
+-----------------------+----------------+----------------------------+----------------------+
|NAME |DESCRIPTION |LINK |TAGS |
|-----------------------|----------------|----------------------------|----------------------|
|demo-cpln-organization |new description |/org/demo-cpln-organization |demo-key="demo-value" |
| | | |type="demo" |
+-----------------------+----------------+----------------------------+----------------------+