project

The OLP CLI supports the
following functionality for projects:

• list projects
• create a project
• update a project
• show a project
• delete a project

project list

Lists the projects you can access.

olp project list [command options]

Optional parameters:

• [filter] Freeform text to filter the project list. The filter checks if a
  project's HRN, name, or description contains the filter string.
• --limit <max number of projects> The maximum number of projects returned
  in the result (100 by default).
• --credentials <path to credentials file> The name of a credentials file to use
  with the command. Credentials files are downloaded separately from the platform portal.
• --profile <profile name> The name of the credentials profile to use from the
  olpcli.ini file.
• --json Displays the command result in JSON format.
• --quiet Displays the project HRNs, each on a new line.

For more information on using credentials and profiles,
see Credentials setup.

Example:

The command below lists those projects whose HRN, name, or description matches
myproject.

olp project list myproject --json

Output:

{"projects": [
        {
            "hrn": "hrn:here:authorization::org:project/myproject",
            "name": "my-project-name",
            "description": "my project description",
            "id": "myproject"
        }
    ]
}

project create

Creates a project.

olp project create <project-id> <project name> [command options]

Required parameters:

• <project-id> A unique project ID that is used as the last part of the
  project's HRN. <project-id> must be an alphanumeric string 4 to 16 characters
  in length; it can contain lowercase characters, numbers, and hyphens. Hyphens
  are not allowed at the beginning or at the end of the string.
• <project name> A human-readable name of the project. The project name must
  be an alphanumeric string up to 200 characters in length from a set of
  lowercase or uppercase characters, numbers, and hyphens.

Note

Project access privileges

By default, the app through which you create a project is granted ProjectAdmin
privileges on that project. Use this app to manage both project access and
project resources though the CLI.

And the associated user account is granted only User privileges on the project,
allowing you to manage project resources through the HERE platform portal. Use
the --skip-sharing-with-user flag to revoke User privileges from the user
account on project creation.

Optional parameters:

• --description <project description> A detailed description of the project
  and its contents. The default value is empty. The string cannot be longer than
  500 characters. Enclose the description with quotes.
• --skip-sharing-with-user Do not share permissions to access the project with
  the associated user account. The default value is false as the CLI shares
  permissions with the user account. This option may be used to prevent associated
  user accounts from reaching the limit of project resources they are allowed to create.
• --credentials <path to credentials file> The name of a credentials file to use
  with the command. Credentials files are downloaded separately from the platform portal.
• --profile <profile name> The name of the credentials profile to use from the
  olpcli.ini file.
• --quiet Displays an empty output without additional information.

For more information on using credentials and profiles,
see Credentials setup.

Example:

The command below creates a new project:

olp project create myproject my-project-name --description "my project description"

Output:

Project hrn:here:authorization::org:project/myproject has been created

project update

Updates the name or description of a project.

olp project update <project HRN> [command options]

Required parameters:

• <project HRN> The HRN of the project.

Optional parameters:

• --name <project name> A new human-readable name for the project. If nothing
  is specified, the original name is retained.
• --description <project description> A new description for the project
  and its contents. The string cannot be longer than 500 characters. Enclose the
  description with quotes. If nothing is specified, the original description is
  retained.
• --scope-access <thisProjectOnly|thisProjectOrNoProject> The scope of access that is
  allowed when operating within this project's scope (through using a project-scoped token).
  Available --scope-access values:
  • thisProjectOnly Requests scoped to this project can only access resources and API calls
    available within this project's scope.
  • thisProjectOrNoProject Requests scoped to this project can access resources and API
    calls available within this project's scope in addition to resources and API calls
    associated with no project at all that the calling identity has access to.
• --default-new-member-policies <list of policies> A comma-separated list with default policies for new project members.
  The default value all-access-all-project-resources and resource-creation-access-all-project-resources. You can specify an empty parameter to remove the default policies.
• --credentials <path to credentials file> The name of a credentials file to use
  with the command. Credentials files are downloaded separately from the HERE platform
  portal.
• --profile <profile name> The name of the credentials profile to use from the
  olpcli.ini file.
• --quiet Displays an empty output without additional information.

For more information on using credentials and profiles,
see Credentials setup.

Example:

The command below updates the name of a project:

olp project update hrn:here:authorization::org:project/myproject --name "my updated name"

Output:

Project hrn:here:authorization::org:project/myproject has been updated

Example:

The command below updates the default policies for new project members:

olp project update hrn:here:authorization::myrealm:project/myproject --default-new-member-policies hrn:here:authorization::HERE:platform:policy/some-policy-id,hrn:here:authorization::HERE:platform:policy/another-policy-id

Output:

Project hrn:here:authorization::myrealm:project/myproject has been updated

project show

Shows the details of a project.

olp project show <project HRN>

Required parameters:

• <project HRN> The HRN of the project.

Optional parameters:

• --credentials <path to credentials file> The name of a credentials file to use
  with the command. Credentials files are downloaded separately from the platform portal.
• --profile <profile name> The name of the credentials profile to use from the
  olpcli.ini file.
• --quiet Displays the project name.
• --json Displays the command result in JSON format.

For more information on using credentials and profiles,
see Credentials setup.

Example:

The command below shows the details of a project:

olp project show hrn:here:authorization::org:project/myproject --json

Output:

{
    "hrn": "hrn:here:authorization::org:project/myproject",
    "name": "my-project-name",
    "description": "my project description",
    "id": "myproject",
    "scopeAccess": "thisProjectOnly",
    "defaultNewMemberProjectPolicies": [
        "hrn:here:authorization::HERE:platform:policy/all-access-all-project-resources",
        "hrn:here:authorization::HERE:platform:policy/resource-creation-access-all-project-resources"
    ]
}

project delete

Deletes a project.

olp project delete <project HRN>

Required parameters:

• <project HRN> The HRN of the project to delete.

Optional parameters:

• --credentials <path to credentials file> The name of a credentials file to use
  with the command. Credentials files are downloaded separately from the platform portal.
• --profile <profile name> The name of the credentials profile to use from the
  olpcli.ini file.
• --quiet Displays an empty output without additional information.

Warning

Project deletion

Deleting a project could have an impact on all the users, apps, and groups
that have project access. If there are resources that have been created from
within the project, you must first remove these resources before deleting
the project itself.

For more information on using credentials and profiles,
see Credentials setup.

Example:

The command below deletes the project myproject:

olp project delete hrn:here:authorization::org:project/myproject

Output:

Project hrn:here:authorization::org:project/myproject has been deleted