org - Control Plane

Manage organizations For a detailed overview, please visit the org’s reference page.

cpln org [SUBCOMMAND]

Commands:
  cpln org access-report <ref>  Show the access report for the referenced organization
  cpln org audit [ref]          Retrieve audit trail events for the referenced organization
  cpln org create               Create a new organization
  cpln org edit <ref>           Edit the referenced organization, as YAML, within an editor
  cpln org eventlog <ref>       Show the event log of the referenced organization  [aliases: log]
  cpln org get [ref...]         Retrieve one or more referenced organizations
  cpln org patch <ref>          Update the referenced organization's metadata using an input file
  cpln org permissions          Show the grantable permissions for an organization object type
  cpln org query                Find all the organizations based on the given query
  cpln org tag <ref...>         Manage the tags belonging to one or more referenced organizations
  cpln org update <ref>         Update properties of the referenced organization

Options:
  --help  Show help  [boolean]

org access-report

Show the access report for the referenced organization Usage

cpln org access-report <ref> [OPTIONS]

Reference

Positionals:
  ref  The resource reference. Usually it is the name of the resource.  [required]

Context options:
  --profile  Override the profile. The default profile can be set using the `cpln profile set-default` command or by setting the CPLN_PROFILE environment variable

Format options:
  --output, -o  Set the output format  [choices: "text", "json", "yaml", "json-slim", "yaml-slim", "tf", "crd", "names"]
  --color       Colorize the output  [boolean] [default: true]
  --ts          Timestamp format if the output format is text (e.g., --output=text)  [choices: "iso", "local", "age"]
  --max         Maximum number of records to show. A value less than 1 will return all records.  [number] [default: 50]

Request options:
  --token         Override the authorization token
  --endpoint      Override the API URL
  --insecure, -k  Ignore TLS errors  [boolean]

Debug options:
  --verbose, -v  Enable verbose output to stderr  [boolean] [default: false]
  --debug, -d    Show all HTTP communications  [boolean] [default: false]

Options:
  --help  Show help  [boolean]

Common Options Reference

Example

cpln org access-report demo-cpln-organization

+-----------------+--------------------------------------------------------+--------+
|PERMISSION       |PRINCIPAL                                               |GRANTED |
|-----------------|--------------------------------------------------------|--------|
|edit             |/org/demo-cpln-organization/group/superusers            |manage  |
|edit             |/org/demo-cpln-organization/serviceaccount/controlplane |manage  |
|exec             |/org/demo-cpln-organization/group/superusers            |manage  |
|exec             |/org/demo-cpln-organization/serviceaccount/controlplane |manage  |
|exec.echo        |/org/demo-cpln-organization/group/superusers            |manage  |
|exec.echo        |/org/demo-cpln-organization/serviceaccount/controlplane |manage  |
|grafanaAdmin     |/org/demo-cpln-organization/group/superusers            |manage  |
|grafanaAdmin     |/org/demo-cpln-organization/serviceaccount/controlplane |manage  |
|manage           |/org/demo-cpln-organization/group/superusers            |manage  |
|manage           |/org/demo-cpln-organization/serviceaccount/controlplane |manage  |
|readLogs         |/org/demo-cpln-organization/group/superusers            |manage  |
|readLogs         |/org/demo-cpln-organization/serviceaccount/controlplane |manage  |
|readMetrics      |/org/demo-cpln-organization/group/superusers            |manage  |
|readMetrics      |/org/demo-cpln-organization/serviceaccount/controlplane |manage  |
|readUsage        |/org/demo-cpln-organization/group/superusers            |manage  |
|readUsage        |/org/demo-cpln-organization/serviceaccount/controlplane |manage  |
|view             |/org/demo-cpln-organization/group/superusers            |manage  |
|view             |/org/demo-cpln-organization/serviceaccount/controlplane |manage  |
|view             |/org/demo-cpln-organization/group/-allmembers           |view    |
|viewAccessReport |/org/demo-cpln-organization/group/superusers            |manage  |
|viewAccessReport |/org/demo-cpln-organization/serviceaccount/controlplane |manage  |
+-----------------+--------------------------------------------------------+--------+

org audit

Retrieve audit trail events for the referenced organization Usage

cpln org audit [ref] [OPTIONS]

Reference

Positionals:
  ref  The resource reference. Usually it is the name of the resource.

Command options:
  --subject  Filter by subject (serviceaccount name or user email)  [string]
  --context  Audit context name (the 'cpln' context displays Control Plane actions)  [string] [default: "cpln"]
  --since    Relative lookback window from now (e.g., 1h, 24h, 7d). Mutually exclusive with --from/--to  [string] [default: "7d"]
  --from     Start time for audit events (ISO 8601 format or relative duration, e.g., 2025-10-23T07:00:00Z, 7d, 1h). Cannot be used with --since  [string]
  --to       End time for audit events (ISO 8601 format or relative duration, e.g., 2025-10-23T07:00:00Z, 1d, 30m)  [string]

Context options:
  --profile  Override the profile. The default profile can be set using the `cpln profile set-default` command or by setting the CPLN_PROFILE environment variable

Format options:
  --output, -o  Set the output format  [choices: "text", "json", "yaml", "json-slim", "yaml-slim", "tf", "crd", "names"]
  --color       Colorize the output  [boolean] [default: true]
  --ts          Timestamp format if the output format is text (e.g., --output=text)  [choices: "iso", "local", "age"]
  --max         Maximum number of records to show. A value less than 1 will return all records.  [number] [default: 50]

Request options:
  --token         Override the authorization token
  --endpoint      Override the API URL
  --insecure, -k  Ignore TLS errors  [boolean]

Debug options:
  --verbose, -v  Enable verbose output to stderr  [boolean] [default: false]
  --debug, -d    Show all HTTP communications  [boolean] [default: false]

Options:
  --help  Show help  [boolean]

Common Options Reference

org create

Create a new organization Usage

cpln org create --name ORG_NAME [OPTIONS]

Reference

Command options:
  --accountId            Id of the billing account  [required]
  --name                 Name of the new organization  [required]
  --description, --desc  Optional description, defaults to the name if not set
  --invitee              Emails of users to invite to the org as superuser(admin)  [required]
  --tag                  Attach tags (e.g., --tag drink=water)

Context options:
  --profile  Override the profile. The default profile can be set using the `cpln profile set-default` command or by setting the CPLN_PROFILE environment variable

Format options:
  --output, -o  Set the output format  [choices: "text", "json", "yaml", "json-slim", "yaml-slim", "tf", "crd", "names"]
  --color       Colorize the output  [boolean] [default: true]
  --ts          Timestamp format if the output format is text (e.g., --output=text)  [choices: "iso", "local", "age"]
  --max         Maximum number of records to show. A value less than 1 will return all records.  [number] [default: 50]

Request options:
  --token         Override the authorization token
  --endpoint      Override the API URL
  --insecure, -k  Ignore TLS errors  [boolean]

Debug options:
  --verbose, -v  Enable verbose output to stderr  [boolean] [default: false]
  --debug, -d    Show all HTTP communications  [boolean] [default: false]

Options:
  --help  Show help  [boolean]

Common Options Reference

Options

name
- Minimum Length: 3
- Maximum Length: 64
- Only lowercase characters
- Must begin with a character
- Allowed special characters: -

Example

cpln org create --name demo-cpln-organization --acountId ACCOUNT_ID --invitee EMAIL

If successful, the new organization will be created.

org edit

Edit the referenced organization, as YAML, within an editor Usage

cpln org edit <ref> [OPTIONS]

The default editor can be set by using the EDITOR environment variable.

Reference

Positionals:
  ref  The resource reference. Usually it is the name of the resource.  [required]

Command options:
  --replace, -r  Replace instead of patch/merge  [boolean] [default: false]

Context options:
  --profile  Override the profile. The default profile can be set using the `cpln profile set-default` command or by setting the CPLN_PROFILE environment variable

Format options:
  --output, -o  Set the output format  [choices: "text", "json", "yaml", "json-slim", "yaml-slim", "tf", "crd", "names"]
  --color       Colorize the output  [boolean] [default: true]
  --ts          Timestamp format if the output format is text (e.g., --output=text)  [choices: "iso", "local", "age"]
  --max         Maximum number of records to show. A value less than 1 will return all records.  [number] [default: 50]

Request options:
  --token         Override the authorization token
  --endpoint      Override the API URL
  --insecure, -k  Ignore TLS errors  [boolean]

Debug options:
  --verbose, -v  Enable verbose output to stderr  [boolean] [default: false]
  --debug, -d    Show all HTTP communications  [boolean] [default: false]

Options:
  --help  Show help  [boolean]

Common Options Reference

Example

cpln org edit demo-cpln-organization

Your default editor will be launched.

Once any modifications are saved, the updates will be sent to the API.

org eventlog

Show the event log of the referenced organization Usage

cpln org eventlog <ref> [OPTIONS]

Reference

Positionals:
  ref  The resource reference. Usually it is the name of the resource.  [required]

Context options:
  --profile  Override the profile. The default profile can be set using the `cpln profile set-default` command or by setting the CPLN_PROFILE environment variable

Format options:
  --output, -o  Set the output format  [choices: "text", "json", "yaml", "json-slim", "yaml-slim", "tf", "crd", "names"]
  --color       Colorize the output  [boolean] [default: true]
  --ts          Timestamp format if the output format is text (e.g., --output=text)  [choices: "iso", "local", "age"]
  --max         Maximum number of records to show. A value less than 1 will return all records.  [number] [default: 50]

Request options:
  --token         Override the authorization token
  --endpoint      Override the API URL
  --insecure, -k  Ignore TLS errors  [boolean]

Debug options:
  --verbose, -v  Enable verbose output to stderr  [boolean] [default: false]
  --debug, -d    Show all HTTP communications  [boolean] [default: false]

Options:
  --help  Show help  [boolean]

Common Options Reference

Example

cpln org eventlog demo-cpln-organization

The event log for the referenced organization will be shown.

org get

Retrieve one or more referenced organizations Usage

cpln org get [ref...] [OPTIONS]

An empty reference will return all references

Reference

Positionals:
  ref  One or more resource references. Usually it is the name of the resource.  [array] [default: []]

Context options:
  --profile  Override the profile. The default profile can be set using the `cpln profile set-default` command or by setting the CPLN_PROFILE environment variable

Format options:
  --output, -o  Set the output format  [choices: "text", "json", "yaml", "json-slim", "yaml-slim", "tf", "crd", "names"]
  --color       Colorize the output  [boolean] [default: true]
  --ts          Timestamp format if the output format is text (e.g., --output=text)  [choices: "iso", "local", "age"]
  --max         Maximum number of records to show. A value less than 1 will return all records.  [number] [default: 50]

Request options:
  --token         Override the authorization token
  --endpoint      Override the API URL
  --insecure, -k  Ignore TLS errors  [boolean]

Debug options:
  --verbose, -v  Enable verbose output to stderr  [boolean] [default: false]
  --debug, -d    Show all HTTP communications  [boolean] [default: false]

Options:
  --help  Show help  [boolean]

Common Options Reference

Example

Get all organizations

cpln org get

+-----------------------+------------------+----------------------------+----------------------+
|NAME                   |DESCRIPTION       |LINK                        |TAGS                  |
|-----------------------|------------------|----------------------------|----------------------|
|demo-cpln-organization |Demo Organization |/org/demo-cpln-organization |demo-key="demo-value" |
|                       |                  |                            |type="demo"           |
+-----------------------+------------------+----------------------------+----------------------+

Get one organization

cpln org get demo-cpln-organization

+-----------------------+------------------+----------------------------+----------------------+
|NAME                   |DESCRIPTION       |LINK                        |TAGS                  |
|-----------------------|------------------|----------------------------|----------------------|
|demo-cpln-organization |Demo Organization |/org/demo-cpln-organization |demo-key="demo-value" |
|                       |                  |                            |type="demo"           |
+-----------------------+------------------+----------------------------+----------------------+

org patch

Update the referenced organization’s metadata using an input file Usage

cpln org patch <ref> --file FILE_NAME [OPTIONS]

Running this command with the option --file - sets the input to stdin. The input is required to be a valid JSON or YAML string (e.g., {"description": "My new description"} or description: My new description). To complete the update, press Control-D (or Control-Z if you are using Windows).

Reference

Positionals:
  ref  The resource reference. Usually it is the name of the resource.  [required]

Command options:
  --file, -f  File to load the patch from. Use `--file -` to enable input from stdin.  [required]

Context options:
  --profile  Override the profile. The default profile can be set using the `cpln profile set-default` command or by setting the CPLN_PROFILE environment variable

Format options:
  --output, -o  Set the output format  [choices: "text", "json", "yaml", "json-slim", "yaml-slim", "tf", "crd", "names"]
  --color       Colorize the output  [boolean] [default: true]
  --ts          Timestamp format if the output format is text (e.g., --output=text)  [choices: "iso", "local", "age"]
  --max         Maximum number of records to show. A value less than 1 will return all records.  [number] [default: 50]

Request options:
  --token         Override the authorization token
  --endpoint      Override the API URL
  --insecure, -k  Ignore TLS errors  [boolean]

Debug options:
  --verbose, -v  Enable verbose output to stderr  [boolean] [default: false]
  --debug, -d    Show all HTTP communications  [boolean] [default: false]

Options:
  --help  Show help  [boolean]

Common Options Reference

Example

cpln org patch demo-cpln-organization --file update.json

The changes within the JSON file will be performed against the referenced organization.

org permissions

Show the grantable permissions for an organization object type Usage

cpln org permissions [OPTIONS]

Reference

Context options:
  --profile  Override the profile. The default profile can be set using the `cpln profile set-default` command or by setting the CPLN_PROFILE environment variable

Format options:
  --output, -o  Set the output format  [choices: "text", "json", "yaml", "json-slim", "yaml-slim", "tf", "crd", "names"]
  --color       Colorize the output  [boolean] [default: true]
  --ts          Timestamp format if the output format is text (e.g., --output=text)  [choices: "iso", "local", "age"]
  --max         Maximum number of records to show. A value less than 1 will return all records.  [number] [default: 50]

Request options:
  --token         Override the authorization token
  --endpoint      Override the API URL
  --insecure, -k  Ignore TLS errors  [boolean]

Debug options:
  --verbose, -v  Enable verbose output to stderr  [boolean] [default: false]
  --debug, -d    Show all HTTP communications  [boolean] [default: false]

Options:
  --help  Show help  [boolean]

Common Options Reference

Example

cpln org permissions

+-----------------+-----------------------------------------+------------------------------------------------------------------------------------------------------+
|NAME             |DESCRIPTION                              |IMPLIES                                                                                               |
|-----------------|-----------------------------------------|------------------------------------------------------------------------------------------------------|
|edit             |Modify org                               |view                                                                                                  |
|exec             |Grantees can execute all commands on ... |exec.echo                                                                                             |
|exec.echo        |Grantees can execute the echo command    |                                                                                                      |
|grafanaAdmin     |Grantees are made Admin in Grafana, o... |                                                                                                      |
|manage           |Full access                              |edit, exec, exec.echo, grafanaAdmin, manage, readLogs, readMetrics, readUsage, view, viewAccessReport |
|readLogs         |Grantees can read logs from all workl... |view                                                                                                  |
|readMetrics      |Grantees can access usage and perform... |                                                                                                      |
|readUsage        |Grantees can access usage and billing... |                                                                                                      |
|view             |Read-only view: every org member can ... |                                                                                                      |
|viewAccessReport |Grantees can inspect the granted acce... |                                                                                                      |
+-----------------+-----------------------------------------+------------------------------------------------------------------------------------------------------+

org query

Find all the organizations based on the given query Usage

cpln org query QUERY_OPTIONS [OPTIONS]

Reference

Query options:
  --match             Query filter type  [choices: "all", "none", "any"] [default: "all"]
  --property, --prop  Property to query
  --tag               Tag to query
  --rel               Relation to query

Context options:
  --profile  Override the profile. The default profile can be set using the `cpln profile set-default` command or by setting the CPLN_PROFILE environment variable

Format options:
  --output, -o  Set the output format  [choices: "text", "json", "yaml", "json-slim", "yaml-slim", "tf", "crd", "names"]
  --color       Colorize the output  [boolean] [default: true]
  --ts          Timestamp format if the output format is text (e.g., --output=text)  [choices: "iso", "local", "age"]
  --max         Maximum number of records to show. A value less than 1 will return all records.  [number] [default: 50]

Request options:
  --token         Override the authorization token
  --endpoint      Override the API URL
  --insecure, -k  Ignore TLS errors  [boolean]

Debug options:
  --verbose, -v  Enable verbose output to stderr  [boolean] [default: false]
  --debug, -d    Show all HTTP communications  [boolean] [default: false]

Options:
  --help  Show help  [boolean]

Common Options Reference

Example

Use the --match option to display all, none, or any of the results based on a given property or tag

Search for an organization based on the name property

cpln org query --match any --prop name=demo-cpln-organization

+-----------------------+------------------+----------------------------+----------------------+
|NAME                   |DESCRIPTION       |LINK                        |TAGS                  |
|-----------------------|------------------|----------------------------|----------------------|
|demo-cpln-organization |Demo Organization |/org/demo-cpln-organization |demo-key="demo-value" |
|                       |                  |                            |type="demo"           |
+-----------------------+------------------+----------------------------+----------------------+

Search for an organization based on the description property

cpln org query --match any --prop description="Demo Organization"

+-----------------------+------------------+----------------------------+----------------------+
|NAME                   |DESCRIPTION       |LINK                        |TAGS                  |
|-----------------------|------------------|----------------------------|----------------------|
|demo-cpln-organization |Demo Organization |/org/demo-cpln-organization |demo-key="demo-value" |
|                       |                  |                            |type="demo"           |
+-----------------------+------------------+----------------------------+----------------------+

Search for an organization based on a tag

cpln org query --match any --tag type=demo

+-----------------------+------------------+----------------------------+----------------------+
|NAME                   |DESCRIPTION       |LINK                        |TAGS                  |
|-----------------------|------------------|----------------------------|----------------------|
|demo-cpln-organization |Demo Organization |/org/demo-cpln-organization |demo-key="demo-value" |
|                       |                  |                            |type="demo"           |
+-----------------------+------------------+----------------------------+----------------------+

Search for an organization based on a property and tag

cpln org query --match any --prop description="Demo Organization" --tag type=demo 

+-----------------------+------------------+----------------------------+----------------------+
|NAME                   |DESCRIPTION       |LINK                        |TAGS                  |
|-----------------------|------------------|----------------------------|----------------------|
|demo-cpln-organization |Demo Organization |/org/demo-cpln-organization |demo-key="demo-value" |
|                       |                  |                            |type="demo"           |
+-----------------------+------------------+----------------------------+----------------------+

org tag

Manage the tags belonging to one or more referenced organizations Usage

cpln org tag <ref...> --tag KEY=VALUE [OPTIONS]

Built-in tags, which begin with cpln/*, can’t be modified.

Reference

Positionals:
  ref  One or more resource references. Usually it is the name of the resource.  [array] [required] [default: []]

Command options:
  --tag         Attach tags (e.g., --tag drink=water)
  --remove-tag  Remove tags (e.g., --remove-tag tagname)

Context options:
  --profile  Override the profile. The default profile can be set using the `cpln profile set-default` command or by setting the CPLN_PROFILE environment variable

Format options:
  --output, -o  Set the output format  [choices: "text", "json", "yaml", "json-slim", "yaml-slim", "tf", "crd", "names"]
  --color       Colorize the output  [boolean] [default: true]
  --ts          Timestamp format if the output format is text (e.g., --output=text)  [choices: "iso", "local", "age"]
  --max         Maximum number of records to show. A value less than 1 will return all records.  [number] [default: 50]

Request options:
  --token         Override the authorization token
  --endpoint      Override the API URL
  --insecure, -k  Ignore TLS errors  [boolean]

Debug options:
  --verbose, -v  Enable verbose output to stderr  [boolean] [default: false]
  --debug, -d    Show all HTTP communications  [boolean] [default: false]

Options:
  --help  Show help  [boolean]

Common Options Reference

Example

Add a tag

cpln org tag demo-cpln-organization --tag drink=water

+-----------------------+------------------+----------------------------+----------------------+
|NAME                   |DESCRIPTION       |LINK                        |TAGS                  |
|-----------------------|------------------|----------------------------|----------------------|
|demo-cpln-organization |Demo Organization |/org/demo-cpln-organization |demo-key="demo-value" |
|                       |                  |                            |drink="water"         |
|                       |                  |                            |type="demo"           |
+-----------------------+------------------+----------------------------+----------------------+

Update same tag (after running the example above)

cpln org tag demo-cpln-organization --tag drink=coffee

+-----------------------+------------------+----------------------------+----------------------+
|NAME                   |DESCRIPTION       |LINK                        |TAGS                  |
|-----------------------|------------------|----------------------------|----------------------|
|demo-cpln-organization |Demo Organization |/org/demo-cpln-organization |demo-key="demo-value" |
|                       |                  |                            |drink="coffee"        |
|                       |                  |                            |type="demo"           |
+-----------------------+------------------+----------------------------+----------------------+

Remove tag (after running the example above)

cpln org tag demo-cpln-organization --remove drink

+-----------------------+------------------+----------------------------+----------------------+
|NAME                   |DESCRIPTION       |LINK                        |TAGS                  |
|-----------------------|------------------|----------------------------|----------------------|
|demo-cpln-organization |Demo Organization |/org/demo-cpln-organization |demo-key="demo-value" |
|                       |                  |                            |type="demo"           |
+-----------------------+------------------+----------------------------+----------------------+

org update

Update properties of the referenced organization Usage

cpln org update <ref> --set UPDATE_PROPERTY [OPTIONS]

Reference

Positionals:
  ref  The resource reference. Usually it is the name of the resource.  [required]

Update Properties:
  --set    Update the following properties (e.g., --set description="Updated Description"):

           description    string
           tags.<key>     string
  --unset  Unset a property (same paths as --set, e.g., --unset description)

Context options:
  --profile  Override the profile. The default profile can be set using the `cpln profile set-default` command or by setting the CPLN_PROFILE environment variable

Format options:
  --output, -o  Set the output format  [choices: "text", "json", "yaml", "json-slim", "yaml-slim", "tf", "crd", "names"]
  --color       Colorize the output  [boolean] [default: true]
  --ts          Timestamp format if the output format is text (e.g., --output=text)  [choices: "iso", "local", "age"]
  --max         Maximum number of records to show. A value less than 1 will return all records.  [number] [default: 50]

Request options:
  --token         Override the authorization token
  --endpoint      Override the API URL
  --insecure, -k  Ignore TLS errors  [boolean]

Debug options:
  --verbose, -v  Enable verbose output to stderr  [boolean] [default: false]
  --debug, -d    Show all HTTP communications  [boolean] [default: false]

Options:
  --help  Show help  [boolean]

Common Options Reference

Options

The --set option allows the modification of the following organization properties:
- description
  - Description of the organization
  - Type: string
- tags
  - Tags (key=value) associated with the organization
  - Type: string

Example

For the examples below, the initial organization is configured as:

+-----------------------+------------------+----------------------------+----------------------+
|NAME                   |DESCRIPTION       |LINK                        |TAGS                  |
|-----------------------|------------------|----------------------------|----------------------|
|demo-cpln-organization |Demo Organization |/org/demo-cpln-organization |demo-key="demo-value" |
|                       |                  |                            |type="demo"           |
+-----------------------+------------------+----------------------------+----------------------+

Update an organization’s description

cpln org update demo-cpln-organization --set description="new description"

+-----------------------+----------------+----------------------------+----------------------+
|NAME                   |DESCRIPTION     |LINK                        |TAGS                  |
|-----------------------|----------------|----------------------------|----------------------|
|demo-cpln-organization |new description |/org/demo-cpln-organization |demo-key="demo-value" |
|                       |                |                            |type="demo"           |
+-----------------------+----------------+----------------------------+----------------------+

Update an organization’s tag

cpln org update demo-cpln-organization --set tags.demo-key=demo-value

+-----------------------+----------------+----------------------------+----------------------+
|NAME                   |DESCRIPTION     |LINK                        |TAGS                  |
|-----------------------|----------------|----------------------------|----------------------|
|demo-cpln-organization |new description |/org/demo-cpln-organization |demo-key="demo-value" |
|                       |                |                            |type="demo"           |
+-----------------------+----------------+----------------------------+----------------------+

​org access-report

​org audit

​org create

​org edit

​org eventlog

​org get

​org patch

​org permissions

​org query

​org tag

​org update

org access-report

org audit

org create

org edit

org eventlog

org get

org patch

org permissions

org query

org tag

org update