Skip to main content
Updated May 10, 2026 The raff member command group manages account-level membership — users who can sign into the account itself, separate from project-level access. To manage who can act inside a specific project, see raff project member. Every subcommand supports --output json for scripting. Alias: raff members.

​
Subcommand index

SubcommandWhat it does
listList account members
getShow details for one member
addAdd a member (by email, existing user, or API key)
updateUpdate a member’s role or status
removeRemove a member from the account

​
list

raff member list [--status pending|active|suspended] [--output table|json]
List account members. Output columns: ID, EMAIL, STATUS, ROLE. Filter by status to find pending invites.

​
get

raff member get <member-id>

​
add

raff member add --role-id <uuid> \
  ( --email <email> | --target-user-id <uuid> | --api-key-id <uuid> )
Add a member. Required: --role-id plus exactly one of:
  • --email — invite a new user; creates a pending member until they accept
  • --target-user-id — add an existing account user directly
  • --api-key-id — grant account-level access to an existing API key
The role must be account-scoped (find via raff role list --scope account). 
# Invite by email
raff member add --email alice@example.com --role-id <admin-role-uuid>

# Grant a CI API key account-level access
raff member add --api-key-id <ci-key-uuid> --role-id <operator-role-uuid>

​
update

raff member update <member-id> \
  [--role-id <uuid>] \
  [--status active|suspended]
Update a member’s role or status. At least one flag must be provided. Suspended members keep their role assignment but cannot sign in.

​
remove

raff member remove <member-id> [--force]
Remove a member from the account. Pass --force to skip the confirmation prompt.

raff_member (Terraform)

Declarative account-level members.

Project member commands

Project-scoped membership.

Invitation commands

List and cancel pending invitations.
Last modified on May 11, 2026