Skip to main content
Version: 1.3

wf create policy assignment

wf create policy assignment

Creates an assignment allowing workspace members to assign roles


By creating an assignment on a role an administrator is allowing the workspace members covered by the policy to assign that role to another managed resource in Wayfinder (the most common use case being a robot).

Assigments cover who can apply the role and optionally to which resource the policy can be applied, i.e, we can limit the assignment to allow apply to all robots, or to a specific robot.

Workspace members can then self-serve those policies using the $ wf assign command.

wf create policy assignment [flags]


# Create an assignment for the plan cluster.deployment
$ wf create policy assignment --role cluster.deployment

# Create an assignment for the policy wayfinder.example
$ wf create policy assignment --policy cluster.deployment


      --dry-run                  Shows the resource but does not apply or create (defaults: false)
--group strings One or more workspaces to apply
-h, --help help for assignment
--robot strings One or more robots accounts
--role string Name of the role you intend to permit
--scope strings One or more subject scopes to apply the role
--subject strings One or more subjects to apply
--workspace-role strings One or more workspace roles to apply the role

Options inherited from parent commands

      --debug              Indicates we should use debug / trace logging (default: false)
--force Used to force an operation to happen (default: false)
--no-wait Indicates we should not wait for resources to provision
-o, --output string Output format of the resource (json,yaml,table,template) (default "table")
--profile string Use a profile other than your default for this command
--show-headers Indicates we should display headers on table out (default true)
--verbose Enables verbose logging for debugging purposes (default: false)
-w, --workspace string The workspace you are operating within