ti fs-vault delete-grant

Revokes one delegated Filesystem Vault grant.

Syntax

ti fs-vault delete-grant
  --grant-id <string>
  [--dry-run]
  [--file-system-id <string>]
  [--fs-token <string>]
  [--help]
  [--reason <string>]
  [--revoked-by <string>]
  [--version]

Options

• --grant-id <string>: Vault grant ID. [required]
• --dry-run: Validate the request without applying changes.
• --file-system-id <string>: Select the file system. You can also set TI_FS_FILE_SYSTEM_ID.
• --fs-token <string>: Set the file system user token. If omitted, uses TI_FS_TOKEN.
• --help: Display help information.
• --reason <string>: Optional revoke reason.
• --revoked-by <string>: Actor label for the revoke audit entry. [default: ti]
• --version: Display version information.

For options shared by all commands, see Global options.

Examples

• Revoke a grant:

  # Invalidate the delegated token and record the revocation reason.
  ti fs-vault delete-grant --file-system-id <file-system-id> --grant-id "<grant-id>" --reason rotated
  

Related documentation

• TiDB Cloud Filesystem Vault CLI Command Reference