tigris-iam
Use when managing IAM policies, users, and permissions in a Tigris organization
- Installs
- 82
- Last 24h
- —
- Trending rank
- —
- Security
- Not audited
Install
Works with every agent the skills CLI supports.
npx skills add https://github.com/tigrisdata/tigris-agents-plugins --skill tigris-iam- 01
Install
Run the command in your project. The CLI asks which agents to install for.
- 02
Describe the task
Ask your agent for something this skill covers. It loads tigris-iam automatically when relevant.
- 03
Review the result
The agent follows the SKILL.md steps, scripts and references bundled with the skill.
SKILL.md
The instructions your agent reads when the skill is triggered.
Tigris IAM (Identity and Access Management)
Policies
Policies define permissions for access keys using AWS IAM-compatible JSON documents.
tigris iam policies list (alias: l)
List all policies in the current organization.
tigris iam policies list
tigris iam policies list --json
| Flag | Alias | Description | Default |
|---|---|---|---|
--format | -f | Output format (json, table, xml) | table |
--json | Output as JSON |
tigris iam policies get [arn] (alias: g)
Show details for a policy including its document and attached users. If no ARN is provided, shows interactive selection.
tigris iam policies get
tigris iam policies get arn:aws:iam::org_id:policy/my-policy
tigris iam policies get --json
| Flag | Alias | Description | Default |
|---|---|---|---|
--format | -f | Output format (json, table, xml) | table |
--json | Output as JSON |
tigris iam policies create <name> (alias: c)
Create a new policy with a name and policy document. The document can be provided via file path, inline JSON, or stdin.
tigris iam policies create my-policy --document policy.json
tigris iam policies create my-policy --document '{"Version":"2012-10-17","Statement":[...]}'
cat policy.json | tigris iam policies create my-policy
| Flag | Alias | Description |
|---|---|---|
--document | -d | Policy document (JSON file path or inline JSON). Reads from stdin if omitted |
--description | Policy description |
tigris iam policies edit [arn] (alias: e)
Update an existing policy's document. If no ARN is provided, shows interactive selection.
tigris iam policies edit --document policy.json
tigris iam policies edit arn:aws:iam::org_id:policy/my-policy --document policy.json
cat policy.json | tigris iam policies edit arn:aws:iam::org_id:policy/my-policy
| Flag | Alias | Description |
|---|---|---|
--document | -d | New policy document (JSON file path or inline JSON). Reads from stdin if omitted |
--description | Update policy description |
tigris iam policies delete [arn] (alias: d)
Delete a policy. If no ARN is provided, shows interactive selection.
tigris iam policies delete
tigris iam policies delete arn:aws:iam::org_id:policy/my-policy --force
| Flag | Description |
|---|---|
--force | Skip confirmation prompt |
Policy Document Format
Policies use AWS IAM JSON format:
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": ["s3:GetObject"],
"Resource": ["arn:aws:s3:::my-bucket/*"]
}
]
}
Example Policies
Read-only access to a bucket:
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": ["s3:GetObject", "s3:ListBucket"],
"Resource": ["arn:aws:s3:::my-bucket", "arn:aws:s3:::my-bucket/*"]
}
]
}
Write to a specific prefix:
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": ["s3:PutObject"],
"Resource": ["arn:aws:s3:::my-bucket/uploads/*"]
}
]
}
Full bucket admin:
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": ["s3:*"],
"Resource": ["arn:aws:s3:::my-bucket", "arn:aws:s3:::my-bucket/*"]
}
]
}
Users
Manage organization members and invitations.
tigris iam users list (alias: l)
List all users and pending invitations in the organization.
tigris iam users list
tigris iam users list --json
| Flag | Alias | Description | Default |
|---|---|---|---|
--format | -f | Output format (json, table, xml) | table |
--json | Output as JSON |
tigris iam users invite <email> (alias: i)
Invite users to the organization by email. Comma-separate for bulk invitations.
tigris iam users invite user@example.com
tigris iam users invite user@example.com --role admin
tigris iam users invite user1@example.com,user2@example.com
| Flag | Alias | Description | Default |
|---|---|---|---|
--role | -r | Role to assign (admin, member) | member |
tigris iam users revoke-invitation [id] (alias: ri)
Revoke pending invitations. If no invitation ID is provided, shows interactive selection. Comma-separate for multiple.
tigris iam users revoke-invitation
tigris iam users revoke-invitation invitation_id --force
tigris iam users revoke-invitation id1,id2,id3 --force
| Flag | Description |
|---|---|
--force | Skip confirmation prompt |
tigris iam users update-role [id] (alias: ur)
Update user roles in the organization. If no user ID is provided, shows interactive selection. Comma-separate for multiple users.
tigris iam users update-role --role admin
tigris iam users update-role user_id --role member
tigris iam users update-role id1,id2 --role admin
tigris iam users update-role id1,id2 --role admin,member
| Flag | Alias | Description |
|---|---|---|
--role | -r | Role(s) to assign (admin, member), comma-separated. Each role pairs with the corresponding user ID. If one role is given, it applies to all users |
tigris iam users remove [id] (alias: rm)
Remove users from the organization. If no user ID is provided, shows interactive selection. Comma-separate for multiple.
tigris iam users remove
tigris iam users remove user@example.com --force
tigris iam users remove user@example.com,user@example.net --force
| Flag | Description |
|---|---|
--force | Skip confirmation prompt |
Roles
| Role | Description |
|---|---|
admin | Full access to all organization resources and settings |
member | Limited access — can use buckets and objects but cannot manage organization settings |
FAQ
What does the tigris-iam skill do?
Use when managing IAM policies, users, and permissions in a Tigris organization
How do I install tigris-iam?
Run npx skills add https://github.com/tigrisdata/tigris-agents-plugins --skill tigris-iam in your project. The skills CLI detects the agents you use and copies the skill into the right folder. For Claude Code you can also place the skill folder at ~/.claude/skills/tigris-iam/ (personal) or .claude/skills/tigris-iam/ (project).
Which AI agents can use tigris-iam?
Any agent that supports the open Agent Skills format (a folder with a SKILL.md file), including Claude Code, Codex, Cursor, GitHub Copilot, Gemini CLI, Windsurf, Cline, OpenCode and more.
Is tigris-iam safe to install?
No partner security audit is available yet. Skills can run commands and scripts, so read the SKILL.md and any bundled files before installing.
Who maintains tigris-iam?
It is published by tigrisdata in tigrisdata/tigris-agents-plugins. It has 82 recorded installs.
More from tigrisdata/tigris-agents-plugins
tigris-objects
tigrisdata/tigris-agents-plugins
Open the skill to read its SKILL.md instructions.
tigris-buckets
tigrisdata/tigris-agents-plugins
Open the skill to read its SKILL.md instructions.
tigris-access-keys
tigrisdata/tigris-agents-plugins
Use when creating, listing, assigning, or deleting access keys for Tigris Storage
tigris-authentication
tigrisdata/tigris-agents-plugins
Use when authenticating with Tigris, managing credentials, or setting up the CLI
Popular other skills
hyperframes-cli
heygen-com/hyperframes
The HyperFrames CLI by job - scaffold, check, look at frames, edit the timeline, preview, render locally or in the cloud, publish, project history - plus reading its JSON and recovering from build or render failures.
triage
mattpocock/skills
Move issues and external PRs through a state machine of triage roles, categorise, verify, grill if needed, and write agent-ready briefs.
ask-matt
mattpocock/skills
Ask which skill or flow fits your situation. A router over the skills in this repo.
to-questionnaire
mattpocock/skills
Turn a decision you can't fully answer into a questionnaire for someone else to fill in.
loop-me
mattpocock/skills
Grill me about specs for the workflows I want to build, within this workspace.