opschain security roles list

Included from Basic tier

Lists the local-lane security-role grant rows (global security administrators, auditors and superusers). Mapped grants — provider groups mapped to a role — are listed on their identity provider's group mappings instead.

opschain security roles list
ROLE                    USER   USER-ID  SCOPE   ID
security_administrator  alice  019a...  global  019a...
security_administrator  bob    019a...  web     019a...
auditor                 carol  019a...  global  019a...

-o, --output json|yaml emits the grant rows as a machine document.

Flags

Flag	Meaning
--server <url>	Server base URL (default: the active context / OPSCHAIN_SERVER).
--auth-token <token>	Bearer token override (default: your opschain login session, then $OPSCHAIN_ADMIN_TOKEN, then the token stored by opschain admin login).
--filter <column>[!]=<value>	Keep only rows matching the term (repeatable; terms AND). Columns are the printed table headers lowercased; * wildcards match the whole cell case-insensitively, != negates, commas mean any-of. Applied client-side. Grammar: opschain docs cli.

See also

• opschain docs cli/security-roles-grant
• opschain docs cli/security-roles-revoke