Reference
crab member
Manage organization memberships using immutable principal UUIDs and the roles
owner, admin, writer, reader, and billing.
Synopsis
crab member [OPTIONS] <COMMAND>Common options
| Option | Default | Description |
|---|---|---|
--service <AUTHORITY> | Active profile | Target an exact installed managed-service authority |
--json | false | Emit one structured JSON envelope |
Commands
list
crab member list [OPTIONS] <ORGANIZATION>| Option | Default | Description |
|---|---|---|
--cursor <CURSOR> | None | Opaque cursor returned by the preceding page |
--limit <LIMIT> | 50 | Page size from 1 through 100 |
crab member list acme --jsonadd
crab member add [OPTIONS] --role <ROLE> <ORGANIZATION> <PRINCIPAL_ID>crab member add acme 018f3f80-7b2d-7c3a-8b1f-a0b1c2d3e4f5 --role writerupdate
crab member update [OPTIONS] --role <ROLE> --revision <REVISION> <ORGANIZATION> <PRINCIPAL_ID>crab member update acme 018f3f80-7b2d-7c3a-8b1f-a0b1c2d3e4f5 \
--role reader \
--revision 2remove
crab member remove [OPTIONS] --revision <REVISION> <ORGANIZATION> <PRINCIPAL_ID>crab member remove acme 018f3f80-7b2d-7c3a-8b1f-a0b1c2d3e4f5 --revision 3Ownership safety
Only owners can change owner memberships. The service rejects removal or
downgrade of the last active owner. Membership update and removal require the
revision shown by crab member list --json.
List membership again after every mutation and retain the returned revision for
the next guarded update. A stale revision fails instead of silently replacing a
concurrent administrator's change. Service targeting uses an installed
authority such as crab.build, not a repository URL. Token and workload
identities belong under crab service-account; member commands operate on
human or workload principals already known to the service.