Key commands:

Run cone help in your terminal to show all available commands.

Run cone <command> --help or cone <command> -h for help with a specific command.

Overview

Cone interacts with the ConductorOne API to manage access to entitlements.

Usage:

cone [command]

Global flags

To see Cone’s current version number, run cone --version or cone -v.

Completion

Generate the autocompletion script for cone for the specified shell.

Usage:

cone completion [subcommand]

bash

Generate the autocompletion script for Bash.

Usage:

cone completion bash [flags]

This script depends on the ‘bash-completion’ package. If it is not installed already, you can install it via your operating system’s package manager.

To load completions in your current shell session: source <(cone completion bash)

To load completions for every new session, execute once:

For Linux: cone completion bash > /etc/bash_completion.d/cone

For macOS: cone completion bash > $(brew --prefix)/etc/bash_completion.d/cone

You will need to start a new shell for this setup to take effect.

fish

Generate the autocompletion script for Fish.

Usage:

cone completion fish [flags]

To load completions in your current shell session: cone completion fish | source

To load completions for every new session, execute once: cone completion fish > ~/.config/fish/completions/cone.fish

You will need to start a new shell for this setup to take effect.

powershell

Generate the autocompletion script for PowerShell.

Usage:

cone completion powershell [flags]

To load completions in your current shell session: cone completion powershell | Out-String | Invoke-Expression

To load completions for every new session, add the output of the above command to your PowerShell profile.

zsh

Generate the autocompletion script for Zsh.

Usage:

cone completion zsh [flags]

If shell completion is not already enabled in your environment you must enable it. You can execute the following once: echo "autoload -U compinit; compinit" >> ~/.zshrc

To load completions in your current shell session: source <(cone completion zsh)

To load completions for every new session, execute once:

For Linux: cone completion zsh > "${fpath[1]}/_cone"

For macOS: cone completion zsh > $(brew --prefix)/share/zsh/site-functions/\_cone

You will need to start a new shell for this setup to take effect.

Drop

Create a revoke access ticket for an entitlement by alias.

Usage:

  cone drop <alias> [flags]
  cone drop --query <query> [flags]
  cone drop --app-id <app-id> --entitlement-id <entitlement-id> [flags]

Get

Create an access request for an entitlement by alias.

Usage:

cone get <alias> [flags]
cone get --query <query> [flags]
cone get --app-id <app-id> --entitlement-id <entitlement-id> [flags]

Get-user

Get a user by ID.

Usage:

cone get-user [flags]

Has

Check if the current user has a specific entitlement for an app.

Usage:

cone has <app-id> <app-entitlement-id> [flags]

Help

Help provides help for any CLI command. Type cone help [path to command] for full details.

Usage:

cone help [command] [flags]

Login

Authenticate to ConductorOne, creating the config.yaml file if it doesn’t exist.

Usage:

cone login <tenant-name or tenant-url> [flags]

Search

Usage:

cone search [flags]

Task

A group of commands related to interacting with tasks directly.

Usage:

cone task [flags]
cone task [command]

approve

Mark a task as approved.

Usage:

cone task approve <task-id> [flags]

comment

Adds the specified comment to a task.

Usage:

cone task comment <task-id> <comment> [flags]

deny

Mark a task as denied.

Usage:

cone task deny <task-id> [flags]

escalate

Escalate an access request task to emergency access.

Usage:

cone task escalate <task-id> [flags]

get

Gets a task by ID.

Usage:

cone task get <task-id> [flags]

search

Search for tasks using various filters.

Usage:

cone task search [flags]

Whoami

Information about the current user.

Usage:

cone whoami [flags]