Skip to main content
Manage the deployment’s principals.

tai principals create

Create a human or service principal under a role. Example: tai principals create --kind service --display-name 'CI runner' --role editor

tai principals delete

Delete a principal — REVOKES every key it owns and drops its policy. Deletion is immediate and cannot be undone: each key the principal owns stops authenticating on its next request. List the keys with tai keys list first. Example: tai principals delete usr-abc123

tai principals disable

Disable a principal — its keys stop authenticating until it is re-enabled. Example: tai principals disable usr-abc123

tai principals enable

Re-enable a disabled principal — its keys authenticate again. Example: tai principals enable usr-abc123

tai principals list

List every principal with its kind, display name, and disabled state. Example: tai principals list