opschain admin users update
Included from Basic tier
Updates a local user's break-glass designation — the only mutable user
attribute this verb carries on the CLI. The flag must be passed explicitly
in either direction (--break-glass or --break-glass=false); omitting
it is a usage error rather than a silent no-op. Directory users refuse
with the server's named shadow-account error. The underlying
The v2 UserService.UpdateUser verb additionally edits the stored
email_address (the GUI's Edit user dialog uses
it); the CLI does not yet expose an email edit.
opschain admin users update emergency.admin --break-glass=false
Updated emergency.admin (provider local)
Flags
| Flag | Meaning |
|---|---|
--break-glass | Set or clear the break-glass designation (a break-glass login emits the never-throttled warn:auth:break_glass event). |
--server <url> | Server base URL (default: the active context / OPSCHAIN_SERVER). |
--auth-token <token> | Admin bearer token override (default: your opschain login session, then $OPSCHAIN_ADMIN_TOKEN, then the token stored by opschain admin login). |
Exit codes
- 0 — updated.
- 1 — the user does not exist, is a directory identity, or the token was rejected.
- 2 — usage, including the connection errors on
opschain docs cli/admin-users.
Named errors
nothing to update — pass --break-glass=<true|false>— exits 2.
See also
opschain docs cli/admin-users-disable— the lifecycle verbs this one sits beside.