The ax resource-restrictions commands are currently in ALPHA. The API may change without notice. A one-time warning is emitted on first use.
The ax resource-restrictions commands let you restrict and unrestrict resources on the Arize platform. Restricting a resource prevents roles bound at higher hierarchy levels (space, org, account) from granting access to it. Currently only PROJECT resources are supported.
ax resource-restrictions restrict
Restrict a resource. This operation is idempotent.
ax resource-restrictions restrict --resource-id <id> [--output <format>] [--verbose]
| Option | Description |
|---|
--resource-id | Global ID of the resource to restrict (required) |
--output, -o | Output format (table, json, csv, parquet) or file path. Defaults to config value. |
--verbose, -v | Enable verbose logs |
Example:
ax resource-restrictions restrict --resource-id proj_abc123
ax resource-restrictions unrestrict
Remove restriction from a resource. Removing a restriction means that roles bound at other levels of the hierarchy (space, org, account) can once again grant access to the resource.
ax resource-restrictions unrestrict --resource-id <id> [--force] [--verbose]
| Option | Description |
|---|
--resource-id | Global ID of the resource to unrestrict (required) |
--force, -f | Skip the confirmation prompt |
--verbose, -v | Enable verbose logs |
Example:
ax resource-restrictions unrestrict --resource-id proj_abc123 --force