strazactl users

Manage users

On this page

strazactl users [flags]

Options inherited from parent commands

      --server string   strazad base URL (overrides $STRAZA_SERVER and the server you logged into)

See also

• strazactl: Straza admin CLI
• strazactl users create: Create a local user
• strazactl users create-nhi: Provision an AI agent or a service account (headless, no password, key-based)
• strazactl users disable: Disable a user (status disabled, every session revoked, lifted by strazactl users enable)
• strazactl users enable: Enable a disabled user: the status goes back to active, the user’s revocations are lifted, and a device still enrolled needs no new enrollment
• strazactl users list: List users
• strazactl users lock: Lock a user: a revocation that an identity manager cannot lift by enabling the user; the status stays as it is
• strazactl users nhi-key: Manage an agent identity’s headless assertion key (straza keygen prints it)
• strazactl users set-password: Set a user’s built-in-issuer password (rotation, or a credential for SCIM-born users)
• strazactl users unlock: Unlock a user: lift the user’s revocations and leave the status as it is, so a disabled user still needs strazactl users enable