Administering Observal
Core administration requires an admin role. Review actions also work for authorized global reviewers and teamspace owners or reviewers.
Execution contract
- Execute commands with a 60 second timeout, except documented long-running server and migration operations.
- Use machine output by default: add
--output json whenever supported. Parse list results from items and pagination fields.
- Run
--help before acting when a path, role requirement, confirmation flag, or destination option is uncertain.
- Read current state before privileged mutations. Use the smallest required authority.
- Supply
--force or another documented confirmation flag for noninteractive destructive operations.
- Verify review decisions, role changes, identity settings, server upgrades, rollback, and imports.
- Never repeat generated passwords, SCIM tokens, certificates, submitted headers, database URLs, environment values, or sensitive audit content.
- Fail openly. Do not bypass the CLI through direct database changes or hand-written migration SQL.
- Never blindly retry privileged mutations. Read resulting state after an uncertain failure.
Choose the workflow
| User intent |
Read |
| Users, settings, diagnostics, reviews, security, audit, SAML, or SCIM |
Governance and identity |
| Local services, versions, upgrades, rollback, reset, or data migration |
Server operations |
Read the selected reference completely before executing.
Safety rules
- Permission denial is a result, not a reason to escalate automatically. Report the required role.
- Review only the returned UUID requested by the user. Never act on table position or an unrelated queue item.
- Treat one-time password and token responses as secrets from the moment they are returned.
- Export and import destinations must be explicit. Validate an archive before import.
- Use the project's migration commands. Never replace them with ad hoc SQL.
- A server command is successful only when the final status confirms the requested service or version state.
Completion
Report the affected resource by safe identifier, resulting state, request ID for failures, and any required follow-up. Redact secret values even when the command returned them successfully.
1---2name: observal-admin3description: Administers Observal users, settings, diagnostics, review queues, security events, audit logs, SAML, SCIM, local server services, upgrades, rollback, and database migrations. Use when the user needs privileged governance, submission decisions, identity configuration, security investigation, or server operations.4---56# Administering Observal78Core administration requires an admin role. Review actions also work for authorized global reviewers and teamspace owners or reviewers.910## Execution contract11121. Execute commands with a 60 second timeout, except documented long-running server and migration operations.132. **Use machine output by default:** add `--output json` whenever supported. Parse list results from `items` and pagination fields.143. Run `--help` before acting when a path, role requirement, confirmation flag, or destination option is uncertain.154. Read current state before privileged mutations. Use the smallest required authority.165. Supply `--force` or another documented confirmation flag for noninteractive destructive operations.176. Verify review decisions, role changes, identity settings, server upgrades, rollback, and imports.187. Never repeat generated passwords, SCIM tokens, certificates, submitted headers, database URLs, environment values, or sensitive audit content.198. Fail openly. Do not bypass the CLI through direct database changes or hand-written migration SQL.209. Never blindly retry privileged mutations. Read resulting state after an uncertain failure.2122## Choose the workflow2324| User intent | Read |25| --- | --- |26| Users, settings, diagnostics, reviews, security, audit, SAML, or SCIM | [Governance and identity](references/governance-and-identity.md) |27| Local services, versions, upgrades, rollback, reset, or data migration | [Server operations](references/server-operations.md) |2829Read the selected reference completely before executing.3031## Safety rules3233- Permission denial is a result, not a reason to escalate automatically. Report the required role.34- Review only the returned UUID requested by the user. Never act on table position or an unrelated queue item.35- Treat one-time password and token responses as secrets from the moment they are returned.36- Export and import destinations must be explicit. Validate an archive before import.37- Use the project's migration commands. Never replace them with ad hoc SQL.38- A server command is successful only when the final status confirms the requested service or version state.3940## Completion4142Report the affected resource by safe identifier, resulting state, request ID for failures, and any required follow-up. Redact secret values even when the command returned them successfully.
Observal