opschain admin users enable
Included from Basic tier
Re-enables a disabled user so they can log in again. Credentials revoked
by the disable stay revoked — the user authenticates afresh. The verb rides
the v2 UserService.EnableUser RPC and, like disable, is valid for ANY
identity: a re-admitted directory leaver stays disabled until this
deliberate re-enable (the ratified leaver rule). A same-named pair is
selected with --provider; without it the refusal names the matches.
Like disable, the verb is on the step-up floor (as
amended 2026-10-22) — an enable reverses a containment decision, so
it requires the same fresh verification: an unelevated session is refused
with the typed STEP_UP_REQUIRED error, surfaced verbatim with the CLI
elevation hint; elevate and retry. --bulk is floored the same way, once
per call.
opschain admin users enable emergency.admin
Enabled emergency.admin (provider local, break-glass)
--bulk enables many users in one call: ids or usernames as arguments, or
whitespace-separated on stdin. Members succeed or are refused
independently; an already-enabled member reports unchanged, and any
refusal makes the verb exit non-zero after reporting every row.
-o json|yaml prints the updated user document (single form) or the
per-member result rows (--bulk).
Flags
| Flag | Meaning |
|---|---|
--provider <auth_provider> | Select the identity provider's row (local, ldap:<key>, oidc:<key>, …) when the username exists under more than one. |
--bulk | Write many users in one call: ids/usernames from the arguments, or whitespace-separated on stdin when no arguments are given. |
--server <url> | Server base URL (default: the active context / OPSCHAIN_SERVER). |
--auth-token <token> | Admin bearer token override (default: your opschain login session, then $OPSCHAIN_ADMIN_TOKEN, then the token stored by opschain admin login). |
Exit codes: 0 on success, 1 when the user does not exist, any bulk member
is refused, or the token is rejected, 2 for the connection usage errors on
opschain docs cli/admin-users.
See also
opschain docs cli/admin-users-disable— the inverse.