Skip to main content

# kater admin access

Controls who can view, edit and manage content in Kater.

{/* Written by apps/landing-page/scripts/docs/write_cli_reference.py from the kater CLI's own help and scripts/docs/cli-reference.md. Do not edit it by hand: change those, then run the script. */}

It changes the same grants as the share dialogs in Kater, through Kater's API, as you. A local copy has no access control of its own. See [Files and access](https://kater.ai/docs/admin/access/).

## Commands

| Command | What it does |
| --- | --- |
| [`kater admin access show`](https://kater.ai/docs/cli-reference/admin/access/show/) | Who has access to a file or folder, and where it comes from. |
| [`kater admin access grant`](https://kater.ai/docs/cli-reference/admin/access/grant/) | Give a member, group or Everyone an access level. |
| [`kater admin access revoke`](https://kater.ai/docs/cli-reference/admin/access/revoke/) | Remove a grant given on this path. Inherited access is changed on the folder it comes from. |
| [`kater admin access restrict`](https://kater.ai/docs/cli-reference/admin/access/restrict/) | Stop a folder inheriting its parent's access. |
| [`kater admin access inherit`](https://kater.ai/docs/cli-reference/admin/access/inherit/) | Let a restricted folder inherit its parent's access again. |

## Who can change access

To see or change the access of a path, you need the Manager level on it, or the `access:administer` permission. For any other path, the commands say that the path is not found. Organisation admins keep full access to everything, and no grant removes it.

## The levels

| Level | What it allows |
| --- | --- |
| `viewer` | Can view. |
| `editor` | Can view, change and delete. |
| `manager` | Can also change who has access. |

A folder passes its grants to everything in it, unless a folder below it is restricted. The CLI does not give **Execute only**. Use the share dialog in Kater for it.

## Only grants give access

An email address, a folder name or the name of a role gives no access to content. Only a grant does. There is no file policy to fall back on.

## Where it runs

Run it in your own terminal. The Kater MCP's `kater` tool and the Files terminal in Kater do not run it. `kater admin access` replaces the `kater acl` command, which is no longer in the CLI.

## Examples

```bash
# See who can open the ad_reporting workspace
kater admin access show connections/snowflake_prod_connection/workspaces/ad_reporting
# Let everyone in the organisation view it
kater admin access grant connections/snowflake_prod_connection/workspaces/ad_reporting --level viewer --everyone
# Remove one person's grant on it
kater admin access revoke connections/snowflake_prod_connection/workspaces/ad_reporting --user teammate@example.com
```

## See also

- [`kater admin`](https://kater.ai/docs/cli-reference/admin/)
- [All commands](https://kater.ai/docs/cli-reference/kater/)

On this page

Commands
Who can change access
The levels
Only grants give access
Where it runs
Examples
See also

Kater CLI Share and administer admin access

kater admin access

Controls who can view, edit and manage content in Kater.

It changes the same grants as the share dialogs in Kater, through Kater’s API, as you. A local copy has no access control of its own. See Files and access.

Commands

Command	What it does
`kater admin access show`	Who has access to a file or folder, and where it comes from.
`kater admin access grant`	Give a member, group or Everyone an access level.
`kater admin access revoke`	Remove a grant given on this path. Inherited access is changed on the folder it comes from.
`kater admin access restrict`	Stop a folder inheriting its parent’s access.
`kater admin access inherit`	Let a restricted folder inherit its parent’s access again.

Who can change access

To see or change the access of a path, you need the Manager level on it, or the access:administer permission. For any other path, the commands say that the path is not found. Organisation admins keep full access to everything, and no grant removes it.

The levels

Level	What it allows
`viewer`	Can view.
`editor`	Can view, change and delete.
`manager`	Can also change who has access.

A folder passes its grants to everything in it, unless a folder below it is restricted. The CLI does not give Execute only. Use the share dialog in Kater for it.

Only grants give access

An email address, a folder name or the name of a role gives no access to content. Only a grant does. There is no file policy to fall back on.

Where it runs

Run it in your own terminal. The Kater MCP’s kater tool and the Files terminal in Kater do not run it. kater admin access replaces the kater acl command, which is no longer in the CLI.

Examples

# See who can open the ad_reporting workspace
kater admin access show connections/snowflake_prod_connection/workspaces/ad_reporting
# Let everyone in the organisation view it
kater admin access grant connections/snowflake_prod_connection/workspaces/ad_reporting --level viewer --everyone
# Remove one person's grant on it
kater admin access revoke connections/snowflake_prod_connection/workspaces/ad_reporting --user teammate@example.com

See also