ironflow role

Manage custom roles for authorization.

ironflow role <subcommand> [flags]

Custom roles extend the three built-in roles (admin, developer, viewer) with organization-scoped roles. Rules that depend on a role are written in the Rego policy set, which tests input.subject.roles. See Custom Roles & Policy Sets for full details.

ironflow role create

Create a new custom role in an organization.

ironflow role create <name> [flags]

Arguments:

Argument	Required	Description
name	Yes	Role name

Flags:

Flag	Short	Type	Default	Description
--org		string		Organization ID (required)
--server	-s	string		Server URL override

Output:

Created role: billing-team (id: role_a1b2c3d4)

ironflow role list

List all roles, optionally filtered by organization.

ironflow role list [flags]

Flags:

Flag	Short	Type	Default	Description
--org		string		Filter by organization
--json		bool	false	Output as JSON
--server	-s	string		Server URL override

Output:

ID              NAME        ORG_ID       DEFAULT
role_a1b2c3d4   admin       org_default  true
role_e5f6g7h8   developer   org_default  true
role_i9j0k1l2   viewer      org_default  true
role_m3n4o5p6   billing     org_default  false

ironflow role get

Get detailed information about a role.

ironflow role get <id> [flags]

Arguments:

Argument	Required	Description
id	Yes	Role ID

Flags:

Flag	Short	Type	Default	Description
--json		bool	false	Output as JSON
--server	-s	string		Server URL override

Output:

ID:      role_a1b2c3d4
Name:    billing-team
Org ID:  org_default
Default: false

ironflow role delete

Delete a custom role by its ID.

ironflow role delete <id> [flags]

Arguments:

Argument	Required	Description
id	Yes	Role ID

Flags:

Flag	Short	Type	Default	Description
--server	-s	string		Server URL override

Output:

Role deleted

Examples:

# Create a custom role
ironflow role create billing-team --org org_default

# List all roles
ironflow role list
ironflow role list --org org_default --json

# Get role details
ironflow role get role_a1b2c3d4

# Delete a custom role
ironflow role delete role_a1b2c3d4

---