Skip to main content
Updated May 10, 2026 The raff permission command group is a read-only catalog of every permission available in Raff. Use it to discover permission names when building a custom role with raff role create. Output supports --output json for scripting. Alias: raff permissions.

Subcommand index


list

List the permission catalog. Output columns: NAME, CATEGORY, SCOPE, DESCRIPTION. Filter by scope to see only account-domain or project-domain permissions — this is helpful when building a role: account-scoped roles only accept account-domain permissions, project-scoped roles only accept project-domain permissions.

Role commands

Build a custom role from the permission catalog.

raff_role (Terraform)

Declarative role management.

Member commands

Assign roles to members.
Last modified on May 11, 2026