Documentation
Users & invitations
List and manage users, inspect roles, and grant direct permissions.
The verentis user command group manages people in an account or workspace. Scope any command with
--account or --workspace.
List & inspect users
verentis user list --workspace <id> # --search, --active <true|false>
verentis user get <userId> --workspace <id>
verentis user roles <userId> --workspace <id> # roles assigned to the user
Activate & suspend
verentis user activate <userId> --workspace <id>
verentis user suspend <userId> --workspace <id>
Direct permission grants
Beyond roles, you can grant a specific scope on a specific resource:
verentis user grants list <userId> --workspace <id>
verentis user grants add <userId> node.file.read \
--resource-id <nodeId> \
--resource-kind Node \
--workspace <id> \
--expires 2026-01-01T00:00:00Z
--resource-kindAccount | Workspace | Node Required
The kind of resource the grant applies to.
--resource-id Required
The account, workspace or node id the grant is scoped to.
--expiresISO 8601Optional expiry timestamp for a temporary grant.
Prefer roles
Direct grants are precise but hard to audit at scale. Reach for roles first and use direct grants for narrow, often time-boxed, exceptions.