akb_grant
Grant vault access to a user with a specified role. Use source_key and revision for rule-driven grants, enabling later withdrawal of your own reason without affecting other grants.
Instructions
Grant vault access to a user. You must be owner or admin of the vault. A rule-driven grantor should name its own source_key so it can later withdraw its own reason without deleting anybody else's.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| role | Yes | Role to grant | |
| user | Yes | Target username | |
| vault | Yes | Vault name | |
| revision | No | Monotonic per (vault, user, source). A retry carrying a revision no newer than the stored one is a no-op rather than an overwrite. | |
| source_key | No | The basis on which the role is held, as '<namespace>:<id>'. Omit it and the grant is 'direct', which is what every grant was before bases could coexist. | |
| _vault_skill_ack | No | Opaque acknowledgement returned as vault_skill.ack_token. After applying that guide, retry the unchanged operation with this value. The bundled proxy supplies it automatically. |