github.com/argoproj/argo-cd/v3@v3.2.1/docs/user-guide/commands/argocd_proj_role_remove-policy.md (about) 1 # `argocd proj role remove-policy` Command Reference 2 3 ## argocd proj role remove-policy 4 5 Remove a policy from a role within a project 6 7 ``` 8 argocd proj role remove-policy PROJECT ROLE-NAME [flags] 9 ``` 10 11 ### Examples 12 13 ``` 14 List the policy of the test-role before removing a policy 15 $ argocd proj role get test-project test-role 16 Role Name: test-role 17 Description: 18 Policies: 19 p, proj:test-project:test-role, projects, get, test-project, allow 20 p, proj:test-project:test-role, applications, update, test-project/project, allow 21 p, proj:test-project:test-role, logs, get, test-project/project, allow 22 JWT Tokens: 23 ID ISSUED-AT EXPIRES-AT 24 1696759698 2023-10-08T11:08:18+01:00 (3 hours ago) <none> 25 26 # Remove the policy to allow update to objects 27 $ argocd proj role remove-policy test-project test-role -a update -p allow -o project 28 29 # The role should be removed now. 30 $ argocd proj role get test-project test-role 31 Role Name: test-role 32 Description: 33 Policies: 34 p, proj:test-project:test-role, projects, get, test-project, allow 35 p, proj:test-project:test-role, logs, get, test-project/project, allow 36 JWT Tokens: 37 ID ISSUED-AT EXPIRES-AT 38 1696759698 2023-10-08T11:08:18+01:00 (4 hours ago) <none> 39 40 41 # Remove the logs read policy 42 $ argocd proj role remove-policy test-project test-role -a get -p allow -o project -r logs 43 44 # The role should be removed now. 45 $ argocd proj role get test-project test-role 46 Role Name: test-role 47 Description: 48 Policies: 49 p, proj:test-project:test-role, projects, get, test-project, allow 50 JWT Tokens: 51 ID ISSUED-AT EXPIRES-AT 52 1696759698 2023-10-08T11:08:18+01:00 (4 hours ago) <none> 53 54 ``` 55 56 ### Options 57 58 ``` 59 -a, --action string Action to grant/deny permission on (e.g. get, create, list, update, delete) 60 -h, --help help for remove-policy 61 -o, --object string Object within the project to grant/deny access. Use '*' for a wildcard. Will want access to '<project>/<object>' 62 -p, --permission string Whether to allow or deny access to object with the action. This can only be 'allow' or 'deny' (default "allow") 63 -r, --resource string Resource e.g. 'applications', 'applicationsets', 'logs', 'exec', etc. (default "applications") 64 ``` 65 66 ### Options inherited from parent commands 67 68 ``` 69 --argocd-context string The name of the Argo-CD server context to use 70 --auth-token string Authentication token; set this or the ARGOCD_AUTH_TOKEN environment variable 71 --client-crt string Client certificate file 72 --client-crt-key string Client certificate key file 73 --config string Path to Argo CD config (default "/home/user/.config/argocd/config") 74 --controller-name string Name of the Argo CD Application controller; set this or the ARGOCD_APPLICATION_CONTROLLER_NAME environment variable when the controller's name label differs from the default, for example when installing via the Helm chart (default "argocd-application-controller") 75 --core If set to true then CLI talks directly to Kubernetes instead of talking to Argo CD API server 76 --grpc-web Enables gRPC-web protocol. Useful if Argo CD server is behind proxy which does not support HTTP2. 77 --grpc-web-root-path string Enables gRPC-web protocol. Useful if Argo CD server is behind proxy which does not support HTTP2. Set web root. 78 -H, --header strings Sets additional header to all requests made by Argo CD CLI. (Can be repeated multiple times to add multiple headers, also supports comma separated headers) 79 --http-retry-max int Maximum number of retries to establish http connection to Argo CD server 80 --insecure Skip server certificate and domain verification 81 --kube-context string Directs the command to the given kube-context 82 --logformat string Set the logging format. One of: json|text (default "json") 83 --loglevel string Set the logging level. One of: debug|info|warn|error (default "info") 84 --plaintext Disable TLS 85 --port-forward Connect to a random argocd-server port using port forwarding 86 --port-forward-namespace string Namespace name which should be used for port forwarding 87 --prompts-enabled Force optional interactive prompts to be enabled or disabled, overriding local configuration. If not specified, the local configuration value will be used, which is false by default. 88 --redis-compress string Enable this if the application controller is configured with redis compression enabled. (possible values: gzip, none) (default "gzip") 89 --redis-haproxy-name string Name of the Redis HA Proxy; set this or the ARGOCD_REDIS_HAPROXY_NAME environment variable when the HA Proxy's name label differs from the default, for example when installing via the Helm chart (default "argocd-redis-ha-haproxy") 90 --redis-name string Name of the Redis deployment; set this or the ARGOCD_REDIS_NAME environment variable when the Redis's name label differs from the default, for example when installing via the Helm chart (default "argocd-redis") 91 --repo-server-name string Name of the Argo CD Repo server; set this or the ARGOCD_REPO_SERVER_NAME environment variable when the server's name label differs from the default, for example when installing via the Helm chart (default "argocd-repo-server") 92 --server string Argo CD server address 93 --server-crt string Server certificate file 94 --server-name string Name of the Argo CD API server; set this or the ARGOCD_SERVER_NAME environment variable when the server's name label differs from the default, for example when installing via the Helm chart (default "argocd-server") 95 ``` 96 97 ### SEE ALSO 98 99 * [argocd proj role](argocd_proj_role.md) - Manage a project's roles 100