@flowcore/cli 4.18.5 → 4.18.6

package/README.md

@@ -23,7 +23,7 @@ $ npm install -g @flowcore/cli
 $ flowcore COMMAND
 running command...
 $ flowcore (--version)
-@flowcore/cli/4.18.5 linux-x64 node-v24.13.0
+@flowcore/cli/4.18.6 linux-x64 node-v24.13.0
 $ flowcore --help [COMMAND]
 USAGE
   $ flowcore COMMAND
@@ -33,6 +33,8 @@ USAGE
 # Commands
 <!-- commands -->
 * [`flowcore apply`](#flowcore-apply)
+* [`flowcore assign policy POLICY_NAME`](#flowcore-assign-policy-policy_name)
+* [`flowcore assign role ROLE_NAME`](#flowcore-assign-role-role_name)
 * [`flowcore auth delete key API_KEY_NAME`](#flowcore-auth-delete-key-api_key_name)
 * [`flowcore auth delete pat PAT`](#flowcore-auth-delete-pat-pat)
 * [`flowcore auth delete secret SECRET_KEY`](#flowcore-auth-delete-secret-secret_key)
@@ -46,6 +48,8 @@ USAGE
 * [`flowcore config ai`](#flowcore-config-ai)
 * [`flowcore config set`](#flowcore-config-set)
 * [`flowcore config show`](#flowcore-config-show)
+* [`flowcore create policy NAME`](#flowcore-create-policy-name)
+* [`flowcore create role NAME`](#flowcore-create-role-name)
 * [`flowcore data-core apply`](#flowcore-data-core-apply)
 * [`flowcore data-core generate event-type FLOWTYPE`](#flowcore-data-core-generate-event-type-flowtype)
 * [`flowcore data-core generate flow-type`](#flowcore-data-core-generate-flow-type)
@@ -58,10 +62,14 @@ USAGE
 * [`flowcore edit role NAME`](#flowcore-edit-role-name)
 * [`flowcore generate nextjs-entity NAME`](#flowcore-generate-nextjs-entity-name)
 * [`flowcore get adapter [ADAPTER]`](#flowcore-get-adapter-adapter)
+* [`flowcore get key-policies KEY_ID`](#flowcore-get-key-policies-key_id)
+* [`flowcore get key-roles KEY_ID`](#flowcore-get-key-roles-key_id)
 * [`flowcore get policy [NAME]`](#flowcore-get-policy-name)
 * [`flowcore get role [NAME]`](#flowcore-get-role-name)
 * [`flowcore get scenario [SCENARIO]`](#flowcore-get-scenario-scenario)
 * [`flowcore get tenant [NAME]`](#flowcore-get-tenant-name)
+* [`flowcore get user-policies USER_ID`](#flowcore-get-user-policies-user_id)
+* [`flowcore get user-roles USER_ID`](#flowcore-get-user-roles-user_id)
 * [`flowcore help [COMMAND]`](#flowcore-help-command)
 * [`flowcore info`](#flowcore-info)
 * [`flowcore login`](#flowcore-login)
@@ -89,7 +97,11 @@ USAGE
 * [`flowcore scenario local`](#flowcore-scenario-local)
 * [`flowcore stream STREAM`](#flowcore-stream-stream)
 * [`flowcore stream http STREAM`](#flowcore-stream-http-stream)
+* [`flowcore unassign policy POLICY_NAME`](#flowcore-unassign-policy-policy_name)
+* [`flowcore unassign role ROLE_NAME`](#flowcore-unassign-role-role_name)
 * [`flowcore update`](#flowcore-update)
+* [`flowcore validate key KEY_ID`](#flowcore-validate-key-key_id)
+* [`flowcore validate user USER_ID`](#flowcore-validate-user-user_id)
 * [`flowcore version`](#flowcore-version)
 * [`flowcore whoami`](#flowcore-whoami)
 
@@ -114,7 +126,73 @@ EXAMPLES
   $ flowcore apply -f ./path/to/manifest.yml
 ```
 
-_See code: [src/commands/apply.ts](https://github.com/flowcore-io/flowcore-cli/blob/v4.18.5/src/commands/apply.ts)_
+_See code: [src/commands/apply.ts](https://github.com/flowcore-io/flowcore-cli/blob/v4.18.6/src/commands/apply.ts)_
+
+## `flowcore assign policy POLICY_NAME`
+
+Assign an IAM policy to a user, API key, or role. Exactly one of --user, --key, or --role must be specified
+
+```
+USAGE
+  $ flowcore assign policy POLICY_NAME -t <value> [--profile <value>] [-j] [--key <value> | --user <value> | --role
+    <value>]
+
+ARGUMENTS
+  POLICY_NAME  The name of the policy to assign
+
+FLAGS
+  -j, --json             Output result as JSON
+  -t, --tenant=<value>   (required) The tenant (organization slug) containing the policy
+      --key=<value>      The API key ID to assign the policy to
+      --profile=<value>  Specify the configuration profile to use
+      --role=<value>     The role name to assign the policy to
+      --user=<value>     The user ID to assign the policy to
+
+DESCRIPTION
+  Assign an IAM policy to a user, API key, or role. Exactly one of --user, --key, or --role must be specified
+
+EXAMPLES
+  $ flowcore iam assign policy read-access --user "auth0|abc123" -t my-org
+
+  $ flowcore iam assign policy read-access --key "550e8400-e29b-41d4-a716-446655440000" -t my-org
+
+  $ flowcore iam assign policy read-access --role data-reader -t my-org
+
+  $ flowcore iam assign policy read-access --user "auth0|abc123" -t my-org -j
+```
+
+_See code: [@flowcore/cli-plugin-iam](https://github.com/flowcore-io/cli-plugin-iam/blob/v1.8.0/src/commands/assign/policy.ts)_
+
+## `flowcore assign role ROLE_NAME`
+
+Assign an IAM role to a user or API key. Exactly one of --user or --key must be specified
+
+```
+USAGE
+  $ flowcore assign role ROLE_NAME -t <value> [--profile <value>] [-j] [--key <value> | --user <value>]
+
+ARGUMENTS
+  ROLE_NAME  The name of the role to assign
+
+FLAGS
+  -j, --json             Output result as JSON
+  -t, --tenant=<value>   (required) The tenant (organization slug) containing the role
+      --key=<value>      The API key ID to assign the role to
+      --profile=<value>  Specify the configuration profile to use
+      --user=<value>     The user ID to assign the role to
+
+DESCRIPTION
+  Assign an IAM role to a user or API key. Exactly one of --user or --key must be specified
+
+EXAMPLES
+  $ flowcore iam assign role data-reader --user "auth0|abc123" -t my-org
+
+  $ flowcore iam assign role data-reader --key "550e8400-e29b-41d4-a716-446655440000" -t my-org
+
+  $ flowcore iam assign role data-reader --user "auth0|abc123" -t my-org -j
+```
+
+_See code: [@flowcore/cli-plugin-iam](https://github.com/flowcore-io/cli-plugin-iam/blob/v1.8.0/src/commands/assign/role.ts)_
 
 ## `flowcore auth delete key API_KEY_NAME`
 
@@ -431,6 +509,68 @@ EXAMPLES
 
 _See code: [@flowcore/cli-plugin-config](https://github.com/flowcore/flowcore-cli-plugin-config/blob/v2.5.0/src/commands/config/show.ts)_
 
+## `flowcore create policy NAME`
+
+Create a new IAM policy with the specified name, version, and policy documents defining resource access rules
+
+```
+USAGE
+  $ flowcore create policy NAME --documents <value> -t <value> --version <value> [--profile <value>] [--description
+    <value>] [-j]
+
+ARGUMENTS
+  NAME  The name of the policy to create
+
+FLAGS
+  -j, --json                 Output result as JSON
+  -t, --tenant=<value>       (required) The tenant (organization slug) to create the policy in
+      --description=<value>  A description of the policy
+      --documents=<value>    (required) JSON array of policy documents, each with "resource" and "action" fields. Use
+                             "-" to read from stdin
+      --profile=<value>      Specify the configuration profile to use
+      --version=<value>      (required) The version of the policy (e.g. 2024-01-01)
+
+DESCRIPTION
+  Create a new IAM policy with the specified name, version, and policy documents defining resource access rules
+
+EXAMPLES
+  $ flowcore iam create policy read-access -t my-org --version "2024-01-01" --documents '[{"resource":"frn::my-org:data-core/*","action":["read","fetch"]}]'
+
+  $ cat docs.json | flowcore iam create policy read-access -t my-org --version "2024-01-01" --documents -
+
+  $ flowcore iam create policy admin-access -t my-org --version "2024-01-01" --description "Full admin access" --documents '[{"resource":"frn::my-org:*","action":"*"}]' -j
+```
+
+_See code: [@flowcore/cli-plugin-iam](https://github.com/flowcore-io/cli-plugin-iam/blob/v1.8.0/src/commands/create/policy.ts)_
+
+## `flowcore create role NAME`
+
+Create a new IAM role with the specified name and optional description
+
+```
+USAGE
+  $ flowcore create role NAME -t <value> [--profile <value>] [--description <value>] [-j]
+
+ARGUMENTS
+  NAME  The name of the role to create
+
+FLAGS
+  -j, --json                 Output result as JSON
+  -t, --tenant=<value>       (required) The tenant (organization slug) to create the role in
+      --description=<value>  A description of the role
+      --profile=<value>      Specify the configuration profile to use
+
+DESCRIPTION
+  Create a new IAM role with the specified name and optional description
+
+EXAMPLES
+  $ flowcore iam create role data-reader -t my-org --description "Read-only data access"
+
+  $ flowcore iam create role admin -t my-org -j
+```
+
+_See code: [@flowcore/cli-plugin-iam](https://github.com/flowcore-io/cli-plugin-iam/blob/v1.8.0/src/commands/create/role.ts)_
+
 ## `flowcore data-core apply`
 
 Apply a manifest configuration for a Data Core to the Flowcore Platform
@@ -567,7 +707,7 @@ EXAMPLES
   cat ./path/to/manifest.yml | flowcore delete -f -
 ```
 
-_See code: [src/commands/delete.ts](https://github.com/flowcore-io/flowcore-cli/blob/v4.18.5/src/commands/delete.ts)_
+_See code: [src/commands/delete.ts](https://github.com/flowcore-io/flowcore-cli/blob/v4.18.6/src/commands/delete.ts)_
 
 ## `flowcore delete policy NAME`
 
@@ -590,7 +730,7 @@ DESCRIPTION
   Delete a policy
 ```
 
-_See code: [@flowcore/cli-plugin-iam](https://github.com/flowcore-io/cli-plugin-iam/blob/v1.7.0/src/commands/delete/policy.ts)_
+_See code: [@flowcore/cli-plugin-iam](https://github.com/flowcore-io/cli-plugin-iam/blob/v1.8.0/src/commands/delete/policy.ts)_
 
 ## `flowcore delete role NAME`
 
@@ -613,7 +753,7 @@ DESCRIPTION
   Delete a role
 ```
 
-_See code: [@flowcore/cli-plugin-iam](https://github.com/flowcore-io/cli-plugin-iam/blob/v1.7.0/src/commands/delete/role.ts)_
+_See code: [@flowcore/cli-plugin-iam](https://github.com/flowcore-io/cli-plugin-iam/blob/v1.8.0/src/commands/delete/role.ts)_
 
 ## `flowcore diff`
 
@@ -634,7 +774,7 @@ EXAMPLES
   $ flowcore diff -f ./path/to/manifest.yml
 ```
 
-_See code: [src/commands/diff.ts](https://github.com/flowcore-io/flowcore-cli/blob/v4.18.5/src/commands/diff.ts)_
+_See code: [src/commands/diff.ts](https://github.com/flowcore-io/flowcore-cli/blob/v4.18.6/src/commands/diff.ts)_
 
 ## `flowcore edit policy NAME`
 
@@ -660,7 +800,7 @@ EXAMPLES
   $ FC_EDITOR=code flowcore iam edit policy my-policy -t my-tenant
 ```
 
-_See code: [@flowcore/cli-plugin-iam](https://github.com/flowcore-io/cli-plugin-iam/blob/v1.7.0/src/commands/edit/policy.ts)_
+_See code: [@flowcore/cli-plugin-iam](https://github.com/flowcore-io/cli-plugin-iam/blob/v1.8.0/src/commands/edit/policy.ts)_
 
 ## `flowcore edit role NAME`
 
@@ -686,7 +826,7 @@ EXAMPLES
   $ FC_EDITOR=code flowcore iam edit role my-role -t my-tenant
 ```
 
-_See code: [@flowcore/cli-plugin-iam](https://github.com/flowcore-io/cli-plugin-iam/blob/v1.7.0/src/commands/edit/role.ts)_
+_See code: [@flowcore/cli-plugin-iam](https://github.com/flowcore-io/cli-plugin-iam/blob/v1.8.0/src/commands/edit/role.ts)_
 
 ## `flowcore generate nextjs-entity NAME`
 
@@ -738,6 +878,64 @@ EXAMPLES
 
 _See code: [@flowcore/cli-plugin-scenario](https://github.com/flowcore/flowcore-cli-plugin-scenario/blob/v4.6.7/src/commands/get/adapter.ts)_
 
+## `flowcore get key-policies KEY_ID`
+
+List all IAM policies assigned to a specific API key
+
+```
+USAGE
+  $ flowcore get key-policies KEY_ID [--profile <value>] [-j] [-w]
+
+ARGUMENTS
+  KEY_ID  The API key ID to get policies for
+
+FLAGS
+  -j, --json             Output result as JSON
+  -w, --wide             Show additional columns in table output
+      --profile=<value>  Specify the configuration profile to use
+
+DESCRIPTION
+  List all IAM policies assigned to a specific API key
+
+EXAMPLES
+  $ flowcore iam get key-policies "550e8400-e29b-41d4-a716-446655440000"
+
+  $ flowcore iam get key-policies "550e8400-e29b-41d4-a716-446655440000" -j
+
+  $ flowcore iam get key-policies "550e8400-e29b-41d4-a716-446655440000" -w
+```
+
+_See code: [@flowcore/cli-plugin-iam](https://github.com/flowcore-io/cli-plugin-iam/blob/v1.8.0/src/commands/get/key-policies.ts)_
+
+## `flowcore get key-roles KEY_ID`
+
+List all IAM roles assigned to a specific API key
+
+```
+USAGE
+  $ flowcore get key-roles KEY_ID [--profile <value>] [-j] [-w]
+
+ARGUMENTS
+  KEY_ID  The API key ID to get roles for
+
+FLAGS
+  -j, --json             Output result as JSON
+  -w, --wide             Show additional columns in table output
+      --profile=<value>  Specify the configuration profile to use
+
+DESCRIPTION
+  List all IAM roles assigned to a specific API key
+
+EXAMPLES
+  $ flowcore iam get key-roles "550e8400-e29b-41d4-a716-446655440000"
+
+  $ flowcore iam get key-roles "550e8400-e29b-41d4-a716-446655440000" -j
+
+  $ flowcore iam get key-roles "550e8400-e29b-41d4-a716-446655440000" -w
+```
+
+_See code: [@flowcore/cli-plugin-iam](https://github.com/flowcore-io/cli-plugin-iam/blob/v1.8.0/src/commands/get/key-roles.ts)_
+
 ## `flowcore get policy [NAME]`
 
 Get a policy
@@ -759,7 +957,7 @@ DESCRIPTION
   Get a policy
 ```
 
-_See code: [@flowcore/cli-plugin-iam](https://github.com/flowcore-io/cli-plugin-iam/blob/v1.7.0/src/commands/get/policy.ts)_
+_See code: [@flowcore/cli-plugin-iam](https://github.com/flowcore-io/cli-plugin-iam/blob/v1.8.0/src/commands/get/policy.ts)_
 
 ## `flowcore get role [NAME]`
 
@@ -782,7 +980,7 @@ DESCRIPTION
   Get a role
 ```
 
-_See code: [@flowcore/cli-plugin-iam](https://github.com/flowcore-io/cli-plugin-iam/blob/v1.7.0/src/commands/get/role.ts)_
+_See code: [@flowcore/cli-plugin-iam](https://github.com/flowcore-io/cli-plugin-iam/blob/v1.8.0/src/commands/get/role.ts)_
 
 ## `flowcore get scenario [SCENARIO]`
 
@@ -840,6 +1038,66 @@ EXAMPLES
 
 _See code: [@flowcore/cli-plugin-tenant-management](https://github.com/flowcore-io/tenant-management/blob/v1.1.1/src/commands/get/tenant.ts)_
 
+## `flowcore get user-policies USER_ID`
+
+List all IAM policies assigned to a specific user, optionally scoped to a tenant
+
+```
+USAGE
+  $ flowcore get user-policies USER_ID [--profile <value>] [-j] [-t <value>] [-w]
+
+ARGUMENTS
+  USER_ID  The user ID to get policies for (e.g. auth0|abc123)
+
+FLAGS
+  -j, --json             Output result as JSON
+  -t, --tenant=<value>   Scope results to a specific tenant (organization slug)
+  -w, --wide             Show additional columns in table output
+      --profile=<value>  Specify the configuration profile to use
+
+DESCRIPTION
+  List all IAM policies assigned to a specific user, optionally scoped to a tenant
+
+EXAMPLES
+  $ flowcore iam get user-policies "auth0|abc123" -t my-org
+
+  $ flowcore iam get user-policies "auth0|abc123" -j
+
+  $ flowcore iam get user-policies "auth0|abc123" -t my-org -w
+```
+
+_See code: [@flowcore/cli-plugin-iam](https://github.com/flowcore-io/cli-plugin-iam/blob/v1.8.0/src/commands/get/user-policies.ts)_
+
+## `flowcore get user-roles USER_ID`
+
+List all IAM roles assigned to a specific user, optionally scoped to a tenant
+
+```
+USAGE
+  $ flowcore get user-roles USER_ID [--profile <value>] [-j] [-t <value>] [-w]
+
+ARGUMENTS
+  USER_ID  The user ID to get roles for (e.g. auth0|abc123)
+
+FLAGS
+  -j, --json             Output result as JSON
+  -t, --tenant=<value>   Scope results to a specific tenant (organization slug)
+  -w, --wide             Show additional columns in table output
+      --profile=<value>  Specify the configuration profile to use
+
+DESCRIPTION
+  List all IAM roles assigned to a specific user, optionally scoped to a tenant
+
+EXAMPLES
+  $ flowcore iam get user-roles "auth0|abc123" -t my-org
+
+  $ flowcore iam get user-roles "auth0|abc123" -j
+
+  $ flowcore iam get user-roles "auth0|abc123" -t my-org -w
+```
+
+_See code: [@flowcore/cli-plugin-iam](https://github.com/flowcore-io/cli-plugin-iam/blob/v1.8.0/src/commands/get/user-roles.ts)_
+
 ## `flowcore help [COMMAND]`
 
 Display help for flowcore.
@@ -878,7 +1136,7 @@ EXAMPLES
   $ flowcore info
 ```
 
-_See code: [src/commands/info.ts](https://github.com/flowcore-io/flowcore-cli/blob/v4.18.5/src/commands/info.ts)_
+_See code: [src/commands/info.ts](https://github.com/flowcore-io/flowcore-cli/blob/v4.18.6/src/commands/info.ts)_
 
 ## `flowcore login`
 
@@ -1613,6 +1871,75 @@ EXAMPLES
 
 _See code: [@flowcore/cli-plugin-core](https://github.com/flowcore/flowcore-cli-plugin-core/blob/v5.7.3/src/commands/stream/http.ts)_
 
+## `flowcore unassign policy POLICY_NAME`
+
+Remove an IAM policy assignment from a user, API key, or role. Exactly one of --user, --key, or --role must be specified
+
+```
+USAGE
+  $ flowcore unassign policy POLICY_NAME -t <value> [--profile <value>] [-j] [--key <value> | --user <value> | --role
+    <value>] [-y]
+
+ARGUMENTS
+  POLICY_NAME  The name of the policy to unassign
+
+FLAGS
+  -j, --json             Output result as JSON
+  -t, --tenant=<value>   (required) The tenant (organization slug) containing the policy
+  -y, --yes              Skip confirmation prompt
+      --key=<value>      The API key ID to unassign the policy from
+      --profile=<value>  Specify the configuration profile to use
+      --role=<value>     The role name to unassign the policy from
+      --user=<value>     The user ID to unassign the policy from
+
+DESCRIPTION
+  Remove an IAM policy assignment from a user, API key, or role. Exactly one of --user, --key, or --role must be
+  specified
+
+EXAMPLES
+  $ flowcore iam unassign policy read-access --user "auth0|abc123" -t my-org -y
+
+  $ flowcore iam unassign policy read-access --key "550e8400-e29b-41d4-a716-446655440000" -t my-org -y
+
+  $ flowcore iam unassign policy read-access --role data-reader -t my-org -y
+
+  $ flowcore iam unassign policy read-access --user "auth0|abc123" -t my-org -j -y
+```
+
+_See code: [@flowcore/cli-plugin-iam](https://github.com/flowcore-io/cli-plugin-iam/blob/v1.8.0/src/commands/unassign/policy.ts)_
+
+## `flowcore unassign role ROLE_NAME`
+
+Remove an IAM role assignment from a user or API key. Exactly one of --user or --key must be specified
+
+```
+USAGE
+  $ flowcore unassign role ROLE_NAME -t <value> [--profile <value>] [-j] [--key <value> | --user <value>] [-y]
+
+ARGUMENTS
+  ROLE_NAME  The name of the role to unassign
+
+FLAGS
+  -j, --json             Output result as JSON
+  -t, --tenant=<value>   (required) The tenant (organization slug) containing the role
+  -y, --yes              Skip confirmation prompt
+      --key=<value>      The API key ID to unassign the role from
+      --profile=<value>  Specify the configuration profile to use
+      --user=<value>     The user ID to unassign the role from
+
+DESCRIPTION
+  Remove an IAM role assignment from a user or API key. Exactly one of --user or --key must be specified
+
+EXAMPLES
+  $ flowcore iam unassign role data-reader --user "auth0|abc123" -t my-org -y
+
+  $ flowcore iam unassign role data-reader --key "550e8400-e29b-41d4-a716-446655440000" -t my-org -y
+
+  $ flowcore iam unassign role data-reader --user "auth0|abc123" -t my-org -j -y
+```
+
+_See code: [@flowcore/cli-plugin-iam](https://github.com/flowcore-io/cli-plugin-iam/blob/v1.8.0/src/commands/unassign/role.ts)_
+
 ## `flowcore update`
 
 Update the Flowcore CLI to the latest version
@@ -1628,7 +1955,69 @@ EXAMPLES
   $ flowcore update
 ```
 
-_See code: [src/commands/update.ts](https://github.com/flowcore-io/flowcore-cli/blob/v4.18.5/src/commands/update.ts)_
+_See code: [src/commands/update.ts](https://github.com/flowcore-io/flowcore-cli/blob/v4.18.6/src/commands/update.ts)_
+
+## `flowcore validate key KEY_ID`
+
+Validate whether an API key has permission to perform an action on one or more resources
+
+```
+USAGE
+  $ flowcore validate key KEY_ID --action <value> --resource <value> -t <value> [--profile <value>] [-j]
+
+ARGUMENTS
+  KEY_ID  The API key ID to validate access for
+
+FLAGS
+  -j, --json                 Output result as JSON
+  -t, --tenant=<value>       (required) The tenant (organization slug) to validate within
+      --action=<value>       (required) The action to validate (e.g. read, write, ingest, fetch)
+      --profile=<value>      Specify the configuration profile to use
+      --resource=<value>...  (required) The resource FRN to validate against (can be specified multiple times)
+
+DESCRIPTION
+  Validate whether an API key has permission to perform an action on one or more resources
+
+EXAMPLES
+  $ flowcore iam validate key "550e8400-e29b-41d4-a716-446655440000" -t my-org --action ingest --resource "frn::my-org:event-type/*"
+
+  $ flowcore iam validate key "550e8400-e29b-41d4-a716-446655440000" -t my-org --action read --resource "frn::my-org:data-core/my-core" -j
+
+  $ flowcore iam validate key "550e8400-e29b-41d4-a716-446655440000" -t my-org --action read --resource "frn::my-org:data-core/core1" --resource "frn::my-org:data-core/core2"
+```
+
+_See code: [@flowcore/cli-plugin-iam](https://github.com/flowcore-io/cli-plugin-iam/blob/v1.8.0/src/commands/validate/key.ts)_
+
+## `flowcore validate user USER_ID`
+
+Validate whether a user has permission to perform an action on one or more resources
+
+```
+USAGE
+  $ flowcore validate user USER_ID --action <value> --resource <value> -t <value> [--profile <value>] [-j]
+
+ARGUMENTS
+  USER_ID  The user ID to validate access for (e.g. auth0|abc123)
+
+FLAGS
+  -j, --json                 Output result as JSON
+  -t, --tenant=<value>       (required) The tenant (organization slug) to validate within
+      --action=<value>       (required) The action to validate (e.g. read, write, ingest, fetch)
+      --profile=<value>      Specify the configuration profile to use
+      --resource=<value>...  (required) The resource FRN to validate against (can be specified multiple times)
+
+DESCRIPTION
+  Validate whether a user has permission to perform an action on one or more resources
+
+EXAMPLES
+  $ flowcore iam validate user "auth0|abc123" -t my-org --action read --resource "frn::my-org:data-core/my-core"
+
+  $ flowcore iam validate user "auth0|abc123" -t my-org --action write --resource "frn::my-org:data-core/*" -j
+
+  $ flowcore iam validate user "auth0|abc123" -t my-org --action read --resource "frn::my-org:data-core/core1" --resource "frn::my-org:data-core/core2"
+```
+
+_See code: [@flowcore/cli-plugin-iam](https://github.com/flowcore-io/cli-plugin-iam/blob/v1.8.0/src/commands/validate/user.ts)_
 
 ## `flowcore version`
 

package/oclif.manifest.json

@@ -196,5 +196,5 @@
       ]
     }
   },
-  "version": "4.18.5"
+  "version": "4.18.6"
 }

package/package.json

@@ -12,7 +12,7 @@
     "@flowcore/cli-plugin-core": "^5.7.3",
     "@flowcore/cli-plugin-data-core": "^3.4.0",
     "@flowcore/cli-plugin-generator": "^1.6.0",
-    "@flowcore/cli-plugin-iam": "^1.7.0",
+    "@flowcore/cli-plugin-iam": "^1.8.0",
     "@flowcore/cli-plugin-scenario": "^4.6.7",
     "@flowcore/cli-plugin-tenant-management": "^1.1.1",
     "@flowcore/sdk": "^1.50.0",
@@ -119,7 +119,7 @@
     "prestart": "npm run build",
     "update-schema": "rover graph introspect https://graph.api.staging.flowcore.io/graphql -o schema.gql"
   },
-  "version": "4.18.5",
+  "version": "4.18.6",
   "bugs": "https://github.com/flowcore-io/flowcore-cli/issues",
   "keywords": [
     "flowcore",