sp group & grant

Phase: v2
When agents use this: Admin automation for access control (not typical diagnosis flows).

Subcommands

sp group

Subcommand	Path prefix
list	/api/userGroup/list
my	/api/userGroup/my
create	POST /api/userGroup/create
members add/remove	/api/userGroup/{groupId}/members
assign-app	POST /api/userGroup/assignApp

sp grant

Subcommand	Path
list	GET /api/appGrant/list
grant	POST /api/appGrant/grant
revoke	POST /api/appGrant/revoke

All require access-token.

Related

• app