Download for macOS
Skill

acl

@zilliztech Updated 2026-10-23

Use when the user wants to manage Zilliz Cloud access control -- custom org or project roles and their policies, granting or revoking a role for an organization member, or binding roles to a SCIM user group. This is cloud-level RBAC over organizations, projects, and clusters -- for database users and privileges inside Milvus see the user-role skill.

claude-codeclaude-code-skillcodexopenaipluginskillvector-databasezilliz

Install

With your agent

Install OMGSkills skill "zilliztech/zilliz-plugin:plugins/zilliz/skills/acl" into this agent's normal skills directory: use the OMGSkills MCP get_skill tool, install only the pinned_install commit and path, verify SKILL.md against pinned_install.skill_md_sha, and stop if MCP or the pin is unavailable. Do not overwrite or change existing skills without asking me.

Manual command

git clone https://github.com/zilliztech/zilliz-plugin /tmp/zilliz-plugin && ln -s /tmp/zilliz-plugin/plugins/zilliz/skills/acl ~/.claude/skills/acl

From README

Prerequisites CLI installed and logged in (see skill). No cluster context required -- these are control-plane operations. The /v2/roles, /v2/members, and /v2/groups routes must be enabled for the caller's endpoint. They are still rolling out: a 404 from any zilliz acl command means the API is not live there yet. Commands Reference zilliz acl is a three-level tree -- acl role, acl member, and acl group. It is deliberately absent from zilliz --help and shell completion while the routes roll out, but every command below runs today and every --help under it works. Roles --project-id on describe, principals, and delete is the project boundary of a pre-defined project role, which carries none of its own. A custom role is addressed by ID alone. Create and update a role Only project roles can be created; the API has no org-role create path. update replaces the policy wholesale -- it never merges -- and prompts before shrinking the statement count unless -y is passed.