enumeray access set-policy

Preview or update model access mode and optionally visibility at an observed generation.

Use when: You want open access, reviewed requests, or invitation-only use for future submissions.

Role and prerequisites: Model owner or current co-admin. Policy inspection and dry-run require models:read; applying also requires access:manage. Install enumeray, configure the API and log in. Use an account or delegated token with the required permissions. Example IDs must be replaced with IDs from your service.

Example

enumeray access policy scalar-double
enumeray access set-policy scalar-double --mode request --visibility listed --generation 1 --dry-run
enumeray access set-policy scalar-double --mode request --visibility listed --generation 1

Resource names and UUIDs below are examples. Replace them with IDs returned by your service; --generation 1 is valid only if the latest response reports generation 1. An exact replay after a successful update conflicts with the original generation and makes no further change. The CLI never refreshes the guard or retries automatically.

Inputs and options

Input	Meaning and use
<MODEL>	Stable model ID from model list/get or supplied by the author. An unlisted model can be addressed by ID, but still requires access.
--mode <MODE>	Model access policy: open allows eligible users, request requires approval, invite requires an accepted invitation. Per-user blocks still apply.
--visibility <VISIBILITY>	listed allows catalogue discovery; unlisted limits discovery to authorized users. Omission preserves the current visibility. Pass it explicitly to change visibility independently of access mode. Visibility does not itself grant permission to run.
--generation <GENERATION>	Observed resource generation from the relevant get, members, policy or limits response. This is an optimistic concurrency check, not a release number. Read again after a conflict; do not blindly increment it.
--dry-run	Inspect the current policy and return observed/proposed mode and visibility at the supplied generation without sending a policy update.

Every command also accepts the profile, API, JSON and timeout options.

Result and next step

Inspects the policy and stops on a stale generation or failed inspection. Dry-run returns observed/proposed policy without mutation; apply shows a before/after summary on stderr unless --json is used, then saves the policy if generation still matches. Omitted visibility is preserved.

Inspect policy again and use requests/invitations for the chosen access mode. After a conflict, review policy and audit before another change.

Exact syntax, defaults and accepted values

Preview or update access policy while preserving omitted visibility

Usage: enumeray access set-policy [OPTIONS] --mode <MODE> --generation <GENERATION> <MODEL>

Arguments:
  <MODEL>  Stable model ID from model list/get or supplied by its author

Options:
      --api <API>                User API origin override; credentials never cross origins. Host/runner commands use explicit configuration
      --mode <MODE>              open admits eligible users, request requires approval, invite requires an accepted invitation; blocks still apply [possible values: open, request, invite]
      --profile <PROFILE>        Named local user API/login profile; host/runner commands use explicit configuration [default: default]
      --visibility <VISIBILITY>  Catalogue visibility; omission preserves the observed value [possible values: listed, unlisted]
      --config <CONFIG>          Private user profiles file; defaults to $XDG_CONFIG_HOME/enumeray/profiles.json or ~/.config/enumeray/profiles.json
      --generation <GENERATION>  Previously observed model generation; a changed policy stops the command
      --dry-run                  Show the observed and proposed policy without changing it
      --json                     Emit user API results as JSON (NDJSON for following logs) and runtime errors on stderr; host/runner output follows its own protocol
      --timeout <TIMEOUT>        User API HTTP timeout in seconds; live logs use it for read inactivity. Does not limit execution time [default: 60]
  -h, --help                     Print help