-s, --search[=<value>] | Global keyword search for a partial string match |
--filter_type[=<value>] | Type of search filter to apply (ruleset|rule|user) |
--ruleset_type[=<value>] | Type of ruleset to filter by (directory_attribute|google_workspace_group|okta_group|etc) |
-p, --policy_ruleset_id[=<value>] | Filter results for a specific ruleset |
-r, --policy_rule_id[=<value>] | Filter results for a specific rule |
-u, --directory_user_id[=<value>] | Filter results for a specific user |
-D, --deleted | Only show soft deleted (expired|deactivated) records |
-S, --state[=<value>] | Only show records with specific state (staged|active|expiring) |
--created_before[=<value>] | Filter results created before a specific date |
--created_after[=<value>] | Filter results created after a specific date |
--updated_before[=<value>] | Filter results updated before a specific date |
--updated_after[=<value>] | Filter results updated after a specific date |
--expires_before[=<value>] | Filter results that will expire before a specific date |
--expires_after[=<value>] | Filter results that will expire after a specific date |
--expired_before[=<value>] | Filter results that expired before a specific date |
--expired_after[=<value>] | Filter results that expired after a specific date |
--deactivated_before[=<value>] | Filter results that were deactivated before a specific date |
--deactivated_after[=<value>] | Filter results that were deactivated after a specific date |
--deleted_before[=<value>] | Filter results that were deactivated or expired before a specific date |
--deleted_after[=<value>] | Filter results that were deactivated or expired after a specific date |
--json | (Debug) Show the raw JSON API response |
--api | (Debug) Show the API endpoint and query string in the command header |
--where=<value> | Client-side exact match on a column (field=value). Can be passed multiple times. |
--where-partial=<value> | Client-side partial (substring) match on a column (field=value). Can be passed multiple times. |
