Role Bindings

Manage role bindings with the AX CLI

The ax role-bindings commands are currently in BETA. The API may change without notice. A one-time warning is emitted on first use. The list command is in ALPHA.

The ax role-bindings commands let you create, retrieve, update, and delete role bindings on the Arize platform. A role binding assigns a role to a user on a specific resource. Only one binding per user per resource is allowed.

ax role-bindings list

List role bindings for the authenticated user’s account. --resource-type is required.

ax role-bindings list --resource-type <type> [--user-id <id>] [--limit <n>] [--cursor <cursor>] [--output <fmt>] [--verbose]

Option	Description
--resource-type	Resource type to list bindings for: SPACE or PROJECT (required)
--user-id	Filter by user ID (global ID)
--limit, -l	Maximum number of role bindings to return (default: 100)
--cursor, -c	Pagination cursor for next page
--output, -o	Output format (table, json, csv, parquet) or file path
--verbose, -v	Enable verbose logs

Examples:

ax role-bindings list --resource-type PROJECT
ax role-bindings list --resource-type SPACE --user-id usr_abc123

ax role-bindings create

Create a new role binding. Assigns a role to a user on the specified resource. If a binding already exists for the user on the resource, the command exits without error.

ax role-bindings create --user-id <id> --role-id <id> --resource-type <type> --resource-id <id> [--output <fmt>] [--verbose]

Option	Description
--user-id	Global ID of the user to bind the role to (required; prompted if omitted)
--role-id	Global ID of the role to assign (required; prompted if omitted)
--resource-type	Resource type to bind the role on: SPACE or PROJECT (required; prompted if omitted)
--resource-id	Global ID of the resource to bind the role on (required; prompted if omitted)
--output, -o	Output format (table, json, csv, parquet) or file path
--verbose, -v	Enable verbose logs

Example:

ax role-bindings create \
  --user-id usr_abc123 \
  --role-id role_xyz789 \
  --resource-type PROJECT \
  --resource-id proj_abc123

ax role-bindings get

Get a role binding by ID.

ax role-bindings get <binding-id> [--output <fmt>] [--verbose]

Option	Description
binding-id	Role binding ID (required positional argument)
--output, -o	Output format (table, json, csv, parquet) or file path
--verbose, -v	Enable verbose logs

Example:

ax role-bindings get rb_abc123

ax role-bindings update

Update a role binding by replacing its assigned role.

ax role-bindings update <binding-id> --role-id <id> [--output <fmt>] [--verbose]

Option	Description
binding-id	Role binding ID (required positional argument)
--role-id	New role ID to assign (required; prompted if omitted)
--output, -o	Output format (table, json, csv, parquet) or file path
--verbose, -v	Enable verbose logs

Example:

ax role-bindings update rb_abc123 --role-id role_new789

ax role-bindings delete

Delete a role binding by ID. This operation is irreversible.

ax role-bindings delete <binding-id> [--force] [--verbose]

Option	Description
binding-id	Role binding ID (required positional argument)
--force, -f	Skip confirmation prompt
--verbose, -v	Enable verbose logs

Examples:

ax role-bindings delete rb_abc123
ax role-bindings delete rb_abc123 --force