autonomy rbac role assign

Assign a role to an operator identity

Synopsis

Assigns a named role to a subject (operator identity string).

The assignment is recorded in the RBAC store and emitted as an audit event
(auth.role.assigned) for compliance traceability.

The subject is an arbitrary identity string — email address, service account
name, or any unique operator identifier used in your deployment.

Usage

autonomy rbac role assign [flags]

Options

      --by string         operator identity making this assignment (recorded in audit)
      --rbac-dir string   RBAC store directory (default: AUTONOMY_RBAC_DIR or XDG state path)
      --reason string     reason for this assignment (recorded in audit)
      --role string       role name to assign (required)
      --subject string    operator identity to assign the role to (required)

Options inherited from parent commands

      --require-signed-manifest   Refuse to start if the SHA256SUMS release manifest or its cosign signature is missing/invalid (Tier 2 binary-integrity check; default: build-time compile-in via -ldflags -X, build-hardened artifacts=true, all others=false)

See also