Policy Commands

Inspect access control policies and permissions in your Treasure Data account.

Commands

tdx policy                    # Show your policies and effective permissions
tdx policy list               # List all policies in the account (admin only)
tdx policy show <policy>      # Show a specific policy's details (admin only)

Show My Permissions

Display the current user's assigned policies and effective permissions. Available to all users.

tdx policy

Output:

👤 Taro L. Saito (leo@example.com) — Administrator
   us01:7060, user_id:16488

📋 Assigned Policies (3):
  • Database edit for production, cost
  • Database manage
  • WorkflowProject view

🔑 Effective Permissions:
  WorkflowProject       view, run, edit
  Segmentation          full
  MasterSegmentConfigs  view, edit, owner_manage
  Databases             manage, owner_manage, edit, query, download
  LlmProject            full, chat
  Journeys              full, edit, view
  ...

List All Policies

List all access control policies in the account. Requires admin or delegated admin privileges.

tdx policy list

Output:

✔ Found 12 policies
  • Database edit for production, cost — Auto-generated edit permission on Database for 16488
  • Database manage — Auto-generated manage permission on Database
  • Full policy
  ...

Show Policy Details

Show a specific policy's permissions and assigned users. Accepts policy name or ID. Requires admin or delegated admin privileges.

# By name
tdx policy show "Database manage"

# By ID
tdx policy show 80264

Output:

📋 Database manage (ID: 80264)
   Auto-generated manage permission on Database
   5 users assigned

🔑 Permissions:
  Databases    manage

👥 Assigned Users:
  • Alice <alice@example.com>
  • Bob <bob@example.com>

Permissions

Command	Required Role
tdx policy	Any authenticated user (own permissions only)
tdx policy list	Admin or delegated admin
tdx policy show	Admin or delegated admin

Examples

# Show your permissions
tdx policy

# Show your permissions as JSON
tdx policy --json

# List all policies (admin only)
tdx policy list

# List policies as JSON (for scripting)
tdx policy list --json

# Show a specific policy by name (admin only)
tdx policy show "Full policy"

# Show a specific policy by ID (admin only)
tdx policy show 504729

# Check permissions on a different site
tdx policy --site jp01