# DoiT Cloud Intelligence CLI (dci) > dci is the command-line interface for DoiT Cloud Intelligence™: work with reports, budgets, anomalies, allocations, and the rest of the platform from a terminal, with a dedicated agent mode for AI harnesses. Every link below serves plain markdown; drop the `.md` suffix for the human-readable page. The same reference is available at runtime via `dci --help` and `dci --help`, and `dci skill ` installs an embedded usage skill (claude, codex, cursor, gemini, kiro, opencode). Agent mode (TOON output, JSON error envelopes on stderr) is auto-detected in most harnesses or forced with `--agent`. ## Guides - [CLI](https://help.doit.com/docs/cli.md): Install and use dci, the Cloud Intelligence™ command-line interface — work with reports, budgets, anomalies, and allocations from your terminal, with scripting-grade exit codes and an agent mode wi... - [Changelog](https://help.doit.com/docs/cli/changelog.md): What changed in each release of dci, the Cloud Intelligence™ command-line interface — new features, improvements, and fixes, updated on every release. - [CLI cheat sheet](https://help.doit.com/docs/cli/cheatsheet.md): A one-page reference of the most useful dci commands and flags — install, authenticate, run reports and queries, pick resources interactively, shape and explore output, work with budgets, anomalies... ## Commands - [accept-budget-suggestion](https://help.doit.com/docs/cli/generated/command-groups/budget-suggestions/accept-budget-suggestion.md): Marks the suggestion as accepted and links it to an existing budget. Create the budget first via `POST /analytics/v1/budgets`, then pass its `id` as `budgetId`. The budget must belong to your account. - [activate-contract](https://help.doit.com/docs/cli/generated/command-groups/contracts/activate-contract.md): Transitions a draft contract to active or scheduled (when the start date is in the future). Produces the same system state as activating via the Console. - [add-ticket-tags](https://help.doit.com/docs/cli/generated/command-groups/support-requests/add-ticket-tags.md): Adds one or more tags to an existing support request. The operation is surgical — only the tags listed in the request are added; existing tags on the ticket are preserved. Re-adding a tag that is a... - [archive-contract-template](https://help.doit.com/docs/cli/generated/command-groups/contract-templates/archive-contract-template.md): Soft-deletes (archives) a contract template owned by the authenticated tenant (from the bearer token). Instantiated contracts are unaffected. Requires ContractTemplatesAdmin, DoiT API access (`plat... - [ask-ava-streaming](https://help.doit.com/docs/cli/generated/command-groups/ava/ask-ava-streaming.md): Send a question to Ava and receive a streaming response via Server-Sent Events (SSE). The response streams back events containing the answer text, conversation ID, and message metadata. - [ask-ava-sync](https://help.doit.com/docs/cli/generated/command-groups/ava/ask-ava-sync.md): Send a question to Ava and receive a synchronous response. Set `ephemeral` to `true` to skip conversation persistence (recommended for programmatic consumers). When `ephemeral` is `false` (default)... - [assign-customer-group-user](https://help.doit.com/docs/cli/generated/command-groups/customer-groups/assign-customer-group-user.md): Assigns a user to a customer group owned by the authenticated tenant. Requires the UsersManager permission. - [assign-objects-to-label](https://help.doit.com/docs/cli/generated/command-groups/labels/assign-objects-to-label.md): Assigns or un-assigns objects to the label specified by the ID. - [async-run-inline](https://help.doit.com/docs/cli/generated/command-groups/reports/async-run-inline.md): Submits an async report execution job using an inline configuration. Returns 202 immediately with a Location header pointing to the operation status endpoint. Requires the Idempotency-Key header to... - [async-run-report-by-id](https://help.doit.com/docs/cli/generated/command-groups/reports/async-run-report-by-id.md): Submits an async execution job for a saved report identified by ID. Returns 202 immediately with a Location header pointing to the operation status endpoint. Requires the Idempotency-Key header. Us... - [build-cloud-flow](https://help.doit.com/docs/cli/generated/command-groups/cloudflow/build-cloud-flow.md): Creates a new CloudFlow and generates its nodes and connections based on the provided natural language intent. The operation streams incremental build events, including the ID of the newly created... - [cancel-async-operation](https://help.doit.com/docs/cli/generated/command-groups/reports/cancel-async-operation.md): Cancels a pending or running async report operation. Already-terminal operations (succeeded, failed, canceled) are returned as-is without any state change (idempotent). Returns 404 if the operation... - [cancel-contract](https://help.doit.com/docs/cli/generated/command-groups/contracts/cancel-contract.md): Cancels (deactivates) a contract. Active contracts cannot be deleted; cancel is the terminal operation. - [cancel-invite](https://help.doit.com/docs/cli/generated/command-groups/users/cancel-invite.md): Marks the invite as `Cancelled` and invalidates the invite token so any outstanding email links stop working. The invite document is retained (soft cancel) — the user row remains visible in `GET /i... - [create-account-role](https://help.doit.com/docs/cli/generated/command-groups/cloud-connect/create-account-role.md): Creates or updates a CloudConnect document for an AWS account. Unlike the CloudFormation variant, this endpoint does not update Firestore channel documents or require a CloudFormation stack ID. - [create-alert](https://help.doit.com/docs/cli/generated/command-groups/alerts/create-alert.md): Creates a new alert. - [create-allocation](https://help.doit.com/docs/cli/generated/command-groups/allocations/create-allocation.md): Creates a new allocation. - [create-annotation](https://help.doit.com/docs/cli/generated/command-groups/annotations/create-annotation.md): Creates a new annotation. - [create-asset](https://help.doit.com/docs/cli/generated/command-groups/assets/create-asset.md): Creates a new asset. - [create-billing-transfer-end-customer-mappings](https://help.doit.com/docs/cli/generated/command-groups/billing-transfer/create-billing-transfer-end-customer-mappings.md): Maps end-customer AWS accounts under a reseller's PMA to their DoiT tenant, as part of AWS billing transfer onboarding. Reseller-only; distributors are explicitly denied (`403`). - [create-billing-transfer-reseller-handshakes](https://help.doit.com/docs/cli/generated/command-groups/billing-transfer/create-billing-transfer-reseller-handshakes.md): Maps reseller to distributor; also sends the handshake if required, as part of AWS billing transfer onboarding. Distributor-only; callers without the ChannelOps distributor tier entitlement receive... - [create-budget](https://help.doit.com/docs/cli/generated/command-groups/budgets/create-budget.md): Create a new budget - [create-cloudflow-connection](https://help.doit.com/docs/cli/generated/command-groups/connections/create-cloudflow-connection.md): Creates a new cloud provider connection. Exactly one of `gcpConfig` or `awsConfig` must be supplied. Returns `400 invalid_connection_config` when both or neither are present. - [create-contract](https://help.doit.com/docs/cli/generated/command-groups/contracts/create-contract.md): Creates a draft contract for the specified customer. Requires the caller to be the direct parent (T1 for a T2-level contract, T2 for a T3-level contract). Write access requires a role without contr... - [create-contract-template](https://help.doit.com/docs/cli/generated/command-groups/contract-templates/create-contract-template.md): Creates a contract template for the authenticated tenant (from the bearer token). Requires ContractTemplatesAdmin, DoiT API access (`platform:externalApi`), and the `channelops:contracts:templates`... - [create-custom-theme](https://help.doit.com/docs/cli/generated/command-groups/settings/create-custom-theme.md): Creates a new custom color theme. Requires Cloud Analytics Admin permission. - [create-customer-group](https://help.doit.com/docs/cli/generated/command-groups/customer-groups/create-customer-group.md): Creates a customer group owned by the authenticated tenant. Requires the UsersManager permission. - [create-datahub-dataset](https://help.doit.com/docs/cli/generated/command-groups/datahub/create-datahub-dataset.md): Creates a new DataHub dataset. A dataset is a logical grouping of events that share the same provider name. Creating a dataset allows you to define metadata such as name and description before inge... - [create-folder](https://help.doit.com/docs/cli/generated/command-groups/folders/create-folder.md): Creates a new Cloud Analytics folder. - [create-geographic-access-custom-region](https://help.doit.com/docs/cli/generated/command-groups/geographic-access/create-geographic-access-custom-region.md): Creates a custom region owned by the authenticated tenant. The tenant must be a customer-hierarchy root. Requires the UsersManager permission. - [create-insight](https://help.doit.com/docs/cli/generated/command-groups/insights/post-insight-result.md): Creates or updates a single insight for the given source and key. If an insight with the same key already exists for the source, it will be updated. Resource results are managed separately via the... - [create-insights](https://help.doit.com/docs/cli/generated/command-groups/insights/post-insight-results.md): Creates or updates multiple insights in a single batch request. Each insight in the batch includes its metadata and resource results inline. For granular control over insight metadata and resource... - [create-label](https://help.doit.com/docs/cli/generated/command-groups/labels/create-label.md): Creates a new label. - [create-report](https://help.doit.com/docs/cli/generated/command-groups/reports/create-report.md): Creates a new report. - [create-ticket](https://help.doit.com/docs/cli/generated/command-groups/support-requests/create-ticket.md): Creates a new support request - [create-ticket-comment](https://help.doit.com/docs/cli/generated/command-groups/support-requests/create-ticket-comment.md): Adds a comment to an existing support request. For customers and service-account callers, comments are always public, even when `private` is `true`. Callers authenticated with DoiT employee privile... - [delete-account-role](https://help.doit.com/docs/cli/generated/command-groups/cloud-connect/delete-account-role.md): Deletes a CloudConnect document for an AWS account. - [delete-alert](https://help.doit.com/docs/cli/generated/command-groups/alerts/delete-alert.md): Deletes the alert specified by the Id. - [delete-allocation](https://help.doit.com/docs/cli/generated/command-groups/allocations/delete-allocation.md): Deletes the allocation specified by the Id. - [delete-annotation](https://help.doit.com/docs/cli/generated/command-groups/annotations/delete-annotation.md): Deletes the annotation specified by the Id. - [delete-ava-conversation](https://help.doit.com/docs/cli/generated/command-groups/ava/delete-ava-conversation.md): Deletes an Ava conversation by its ID. - [delete-budget](https://help.doit.com/docs/cli/generated/command-groups/budgets/delete-budget.md): Deletes the specified budget. - [delete-cloudflow-connection](https://help.doit.com/docs/cli/generated/command-groups/connections/delete-cloudflow-connection.md): Deletes a connection. Returns 409 if the connection is referenced by one or more flows. - [delete-custom-theme](https://help.doit.com/docs/cli/generated/command-groups/settings/delete-custom-theme.md): Deletes the custom theme specified by the Id. Requires Cloud Analytics Admin permission. - [delete-customer-geographic-access-scope](https://help.doit.com/docs/cli/generated/command-groups/geographic-access/delete-customer-geographic-access-scope.md): Clears the geographic scope for a target customer, leaving it unassigned. The authenticated tenant must be the hierarchy root, and the target must be that root customer or one of its child customer... - [delete-customer-group](https://help.doit.com/docs/cli/generated/command-groups/customer-groups/delete-customer-group.md): Deletes a customer group owned by the authenticated tenant. Groups with assigned users cannot be deleted. Requires the UsersManager permission. - [delete-datahub-dataset](https://help.doit.com/docs/cli/generated/command-groups/datahub/delete-datahub-dataset.md): Deletes a specific DataHub dataset. - [delete-datahub-datasets](https://help.doit.com/docs/cli/generated/command-groups/datahub/delete-datahub-datasets.md): Deletes one or more DataHub datasets and all their associated data. - [delete-datahub-events-by-filter](https://help.doit.com/docs/cli/generated/command-groups/datahub/delete-datahub-events-by-filter.md): Deletes specific events using filters. Note that the two filters, `eventIds` and `time ranges`, are mutually exclusive. - [delete-folder](https://help.doit.com/docs/cli/generated/command-groups/folders/delete-folder.md): Deletes the specified folder. All nested folders will be deleted. Any reports or allocations contained in the folder are moved to the root. - [delete-geographic-access-custom-region](https://help.doit.com/docs/cli/generated/command-groups/geographic-access/delete-geographic-access-custom-region.md): Deletes a custom region owned by the authenticated tenant. Assigned regions cannot be deleted. Requires the UsersManager permission. - [delete-insight](https://help.doit.com/docs/cli/generated/command-groups/insights/delete-insight-result.md): Permanently deletes a single insight and all its associated resource results. Only insights created via the public API can be deleted. - [delete-insights](https://help.doit.com/docs/cli/generated/command-groups/insights/delete-insight-results.md): Deletes all insights matching the specified key from the batch source. This removes the insight and all its associated resource results. For single-insight deletion, use `DELETE /source/\{sourceID\... - [delete-label](https://help.doit.com/docs/cli/generated/command-groups/labels/delete-label.md): Deletes the label specified by the Id. - [delete-report](https://help.doit.com/docs/cli/generated/command-groups/reports/delete-report.md): Deletes the specified Cloud Analytics report. - [delete-user](https://help.doit.com/docs/cli/generated/command-groups/users/delete-user.md): Deletes a user. - [delete-user-geographic-access-scope](https://help.doit.com/docs/cli/generated/command-groups/geographic-access/delete-user-geographic-access-scope.md): Clears the geographic scope assigned to a user who belongs to the target customer, leaving it unassigned. The authenticated tenant must be the hierarchy root, and the target must be that root custo... - [dismiss-budget-suggestion](https://help.doit.com/docs/cli/generated/command-groups/budget-suggestions/dismiss-budget-suggestion.md): Marks the suggestion as dismissed so it no longer appears in the pending list. - [export-cloud-diagram-json](https://help.doit.com/docs/cli/generated/command-groups/cloud-diagrams/export-cloud-diagram-json.md): Exports the full content of a diagram layer as a structured JSON document, including all components and export metadata. - [export-cloudflow-flow](https://help.doit.com/docs/cli/generated/command-groups/cloudflow/export-cloudflow-flow.md): Serializes the flow — plus every flow it references through subflow nodes — into a tenant-neutral, credential-free JSON bundle that can be imported into any tenant with the import operation. Tenant... - [export-datahub-dataset-records](https://help.doit.com/docs/cli/generated/command-groups/datahub/export-datahub-dataset-records.md): Returns one page of the live records of a DataHub dataset, as CSV (default) or as newline-delimited JSON in the same shape as the `/datahub/v1/events` payload. - [find-cloud-diagrams](https://help.doit.com/docs/cli/generated/command-groups/cloud-diagrams/find-cloud-diagrams.md): Returns diagram URLs matching the provided resource IDs. - [get-active-theme](https://help.doit.com/docs/cli/generated/command-groups/settings/get-active-theme.md): Returns the theme currently active for the authenticated user. `themeId` is the reserved sentinel `"default"` when no custom or preset theme is selected and the user is on the built-in default. - [get-alert](https://help.doit.com/docs/cli/generated/command-groups/alerts/get-alert.md): Returns an alert by the specified Id. - [get-allocation](https://help.doit.com/docs/cli/generated/command-groups/allocations/get-allocation.md): Returns an allocation by the specified Id. - [get-annotation](https://help.doit.com/docs/cli/generated/command-groups/annotations/get-annotation.md): Returns an annotation by the specified Id. - [get-anomaly](https://help.doit.com/docs/cli/generated/command-groups/anomalies/get-anomaly.md): Returns the specified anomaly. - [get-anomaly-explanation](https://help.doit.com/docs/cli/generated/command-groups/anomalies/get-anomaly-explanation.md): Returns a likely-cause explanation for the specified anomaly, alongside the deterministic facts and evidence references it was generated from. The explanation itself is AI-generated; it is always r... - [get-asset](https://help.doit.com/docs/cli/generated/command-groups/assets/get-asset.md): Returns the full details of an asset specified by the asset id. - [get-async-operation](https://help.doit.com/docs/cli/generated/command-groups/reports/get-async-operation.md): Returns the current status of an async report operation. Non-terminal operations (pending, running) include a Retry-After header suggesting when to poll again. This endpoint does not return result... - [get-async-operation-results](https://help.doit.com/docs/cli/generated/command-groups/reports/get-async-operation-results.md): Returns the result of a succeeded async report operation, including report metadata (id, reportName, owner, type, createTime, updateTime, urlUI) when the operation was started against a saved repor... - [get-aws-account](https://help.doit.com/docs/cli/generated/command-groups/cloud-connect/get-aws-account.md): Returns the current state of an AWS account including role, supported features, and optional S3 bucket configuration. - [get-aws-member-account](https://help.doit.com/docs/cli/generated/command-groups/perfectscale-for-commitments-aws/get-aws-member-account.md): Returns a single member AWS account with the same list-item fields as List member accounts, plus the Overview time series. Use this when you need a single members Console Overview in one call (iden... - [get-aws-organization](https://help.doit.com/docs/cli/generated/command-groups/perfectscale-for-commitments-aws/get-aws-organization.md): Returns a single AWS organization with the same list-item fields as List AWS Organizations, plus the Overview time series. Use this when you need a single organization's Console Overview in one cal... - [get-aws-recommendation](https://help.doit.com/docs/cli/generated/command-groups/perfectscale-for-commitments-aws/get-aws-recommendation.md): Returns the recommendation for one commitment type (`serviceId`) on the AWS organization, including analysis metrics and time-bucketed eligible spend. Use `granularity` to choose the eligible-spend... - [get-billing-explainer-per-payer](https://help.doit.com/docs/cli/generated/command-groups/billing-explainer/get-billing-explainer-per-payer.md): Returns the invoiced cost changes for each payer in the authenticated tenant. - [get-billing-transfer-program-management-accounts-status](https://help.doit.com/docs/cli/generated/command-groups/billing-transfer/get-billing-transfer-program-management-accounts-status.md): Lightweight polling surface for the onboarding wizard: returns each of the caller's PMAs with only its IAM status/diff and timestamps — no tenant fan-out, no handshake aggregation, no pagination. D... - [get-budget](https://help.doit.com/docs/cli/generated/command-groups/budgets/get-budget.md): Returns the current utilization and configuration of the specified budget. - [get-cloud-connect-supported-features](https://help.doit.com/docs/cli/generated/command-groups/cloud-connect/get-cloud-connect-supported-features.md): Returns the list of supported features and their permission status for a cloud account connected via CloudConnect. The account must belong to the authenticated customer. Supports AWS and Azure acco... - [get-cloud-diagram-components](https://help.doit.com/docs/cli/generated/command-groups/cloud-diagrams/get-cloud-diagram-components.md): Returns diagram and layer data. When the request body is empty, returns all diagrams the caller has access to. When the body is populated, returns full diagram data including layer components proje... - [get-cloud-diagram-cost-snapshot](https://help.doit.com/docs/cli/generated/command-groups/cloud-diagrams/get-cloud-diagram-cost-snapshot.md): Returns a bounded cost snapshot for the specified diagram layer over a date window. The response composes the diagram's total spend, period-over-period change, top resources by cost (capped at 5),... - [get-cloud-diagram-layer-snapshot](https://help.doit.com/docs/cli/generated/command-groups/cloud-diagrams/get-cloud-diagram-layer-snapshot.md): Returns a single snapshot of the specified diagram layer identified by its ID. - [get-cloud-diagram-resource-relationships](https://help.doit.com/docs/cli/generated/command-groups/cloud-diagrams/get-cloud-diagram-resource-relationships.md): Walks the diagram graph from the anchor resource and returns related resources. Edge traversal walks the diagram's link set (same-scheme guard, BFS, cycle-safe); group traversal walks the group mem... - [get-cloud-diagrams-stats](https://help.doit.com/docs/cli/generated/command-groups/cloud-diagrams/get-cloud-diagrams-stats.md): Returns a list of all diagrams with activity stats for the given time period. - [get-cloud-incident](https://help.doit.com/docs/cli/generated/command-groups/cloud-incidents/get-known-issue.md): Returns the specified cloud incident. - [get-cloudflow-connection](https://help.doit.com/docs/cli/generated/command-groups/connections/get-cloudflow-connection.md): Returns a single connection by ID. - [get-cloudflow-flow-run](https://help.doit.com/docs/cli/generated/command-groups/cloudflow/get-cloudflow-flow-run.md): Returns a run's status and, for each node, the JSON it consumed and produced. This is how you find out *why* a run failed, or that it "succeeded" while producing the wrong data. - [get-cloudflow-template](https://help.doit.com/docs/cli/generated/command-groups/templates/get-cloudflow-template.md): Returns a single CloudFlow template by ID. - [get-commitment](https://help.doit.com/docs/cli/generated/command-groups/commitment-manager/get-commitment.md): Returns a commitment by the specified Id. - [get-contract](https://help.doit.com/docs/cli/generated/command-groups/contracts/get-contract.md): Returns the specified contract. - [get-contract-template](https://help.doit.com/docs/cli/generated/command-groups/contract-templates/get-contract-template.md): Returns a single contract template owned by the authenticated tenant (from the bearer token). Requires ContractTemplatesAdmin, DoiT API access (`platform:externalApi`), and the `channelops:contract... - [get-custom-theme](https://help.doit.com/docs/cli/generated/command-groups/settings/get-custom-theme.md): Returns a custom theme by the specified Id. - [get-customer](https://help.doit.com/docs/cli/generated/command-groups/customers/get-customer.md): Returns the customer, including its general settings and contact info, scoped to `\{customerId\}`. `\{customerId\}` must match the customer resolved from the bearer token; a token scoped to a diffe... - [get-customer-geographic-access-scope](https://help.doit.com/docs/cli/generated/command-groups/geographic-access/get-customer-geographic-access-scope.md): Returns the geographic scope for a target customer. The authenticated tenant must be the hierarchy root, and the target must be that root customer or one of its child customers. Targets outside tha... - [get-customer-group](https://help.doit.com/docs/cli/generated/command-groups/customer-groups/get-customer-group.md): Returns a customer group owned by the authenticated tenant. Requires the UsersManager permission. - [get-datahub-dataset](https://help.doit.com/docs/cli/generated/command-groups/datahub/get-datahub-dataset.md): Returns a specific DataHub dataset by name. - [get-dimension](https://help.doit.com/docs/cli/generated/command-groups/dimensions/get-dimensions.md): Returns a dimension by type and key. - [get-entity-invoice-explainer](https://help.doit.com/docs/cli/generated/command-groups/billing-explainer/get-entity-invoice-explainer.md): Returns invoiced cost changes for an invoice owned by the specified billing profile in the authenticated tenant. - [get-folder](https://help.doit.com/docs/cli/generated/command-groups/folders/get-folder.md): Returns the specified Cloud Analytics folder. - [get-gcp-billing-account](https://help.doit.com/docs/cli/generated/command-groups/perfectscale-for-commitments-gcp/get-gcp-billing-account.md): Returns a single GCP Billing Account with the same list-item fields as List GCP Billing Accounts, plus the Overview time series. Use this when you need a single billing account's Console Overview i... - [get-gcp-recommendation](https://help.doit.com/docs/cli/generated/command-groups/perfectscale-for-commitments-gcp/get-gcp-recommendation.md): Returns the recommendation for one product line (`gcp_service`) and region scope on the GCP billing account, including analysis metrics and time-bucketed eligible spend. Use `granularity` to choose... - [get-geographic-access-custom-region](https://help.doit.com/docs/cli/generated/command-groups/geographic-access/get-geographic-access-custom-region.md): Returns a custom region owned by the authenticated tenant. Requires the UsersManager permission. - [get-insight](https://help.doit.com/docs/cli/generated/command-groups/insights/get-insight-result.md): Returns the metadata and aggregate summary for a single insight identified by source and key. Does not include individual resource-level results — use the resource-results endpoint for those. - [get-invoice](https://help.doit.com/docs/cli/generated/command-groups/invoices/get-invoice.md): Returns the full details of an invoice specified by the invoice number. - [get-label](https://help.doit.com/docs/cli/generated/command-groups/labels/get-label.md): Returns a label by the specified Id. - [get-label-assignments](https://help.doit.com/docs/cli/generated/command-groups/labels/get-label-assignments.md): Returns the list of objects currently assigned to the label specified by the ID. - [get-report](https://help.doit.com/docs/cli/generated/command-groups/reports/get-report.md): Returns the results of the specified report. - [get-report-config](https://help.doit.com/docs/cli/generated/command-groups/reports/get-report-config.md): Returns the configuration of the specified Cloud Analytics report. - [get-resource-permission](https://help.doit.com/docs/cli/generated/command-groups/sharing/get-resource-permission.md): Returns the permissions associated with the specified Cloud Analytics resource. Supports Allocations, Alerts, Budgets, and Reports. - [get-statussheet-components](https://help.doit.com/docs/cli/generated/command-groups/cloud-diagrams/get-statussheet-components.md): Returns the specified components of a diagram layer. Provide at least one component type with one or more IDs in the request body (for example, `node` or `element`). - [get-ticket](https://help.doit.com/docs/cli/generated/command-groups/support-requests/get-ticket.md): Returns the details of a single support request by its ID. - [get-user-geographic-access-scope](https://help.doit.com/docs/cli/generated/command-groups/geographic-access/get-user-geographic-access-scope.md): Returns the geographic scope assigned to a user who belongs to the target customer. The authenticated tenant must be the hierarchy root, and the target must be that root customer or one of its chil... - [import-cloudflow-flow](https://help.doit.com/docs/cli/generated/command-groups/cloudflow/import-cloudflow-flow.md): Creates every flow of a previously exported bundle in the authenticated tenant. Imports are create-only: each call creates new draft flows with new IDs — nothing is published and no schedule is act... - [ingest-datahub-events](https://help.doit.com/docs/cli/generated/command-groups/datahub/datahub-events.md): Sends a batch of events to DataHub. - [ingest-datahub-events-csv](https://help.doit.com/docs/cli/generated/command-groups/datahub/datahub-events-csvfile.md): Sends a batch of events to DataHub using a CSV file, either uncompressed or compressed in ZIP or GZ format. It may take up to 15 minutes for the data to become available in the DoiT console. - [invite-user](https://help.doit.com/docs/cli/generated/command-groups/users/invite-user.md): Invites a new user to the organization with specified role and organization. - [list-account-team](https://help.doit.com/docs/cli/generated/command-groups/accountteam/list-account-team.md): Returns a list of all DoiT account managers assigned to your organization. - [list-alert-slack-channels](https://help.doit.com/docs/cli/generated/command-groups/alerts/list-alert-slack-channels.md): Lists Slack destinations eligible for Alert notifications for the authenticated customer and caller. Returns canonical identifiers for recipientsSlackChannels and integration status. User credentia... - [list-alerts](https://help.doit.com/docs/cli/generated/command-groups/alerts/list-alerts.md): Returns a list of alerts that your account has access to. Alerts are listed in reverse chronological order by default. - [list-allocations](https://help.doit.com/docs/cli/generated/command-groups/allocations/list-allocations.md): Returns a list of allocations that your account has access to. Allocations are listed in reverse chronological order by default. - [list-annotations](https://help.doit.com/docs/cli/generated/command-groups/annotations/list-annotations.md): Returns a list of annotations that your account has access to. Annotations are listed in reverse chronological order by default. - [list-anomalies](https://help.doit.com/docs/cli/generated/command-groups/anomalies/list-anomalies.md): Returns a list of detected anomalies. Anomalies can be sorted by `startTime`, `severityLevel`, or `costOfAnomaly` using `sortBy` and `sortOrder`. By default they are sorted by `startTime` in descen... - [list-assets](https://help.doit.com/docs/cli/generated/command-groups/assets/id-of-assets.md): Returns a list of all available customer assets, such as Google Cloud billing accounts, G Suite/Workspace subscriptions, etc. Assets are returned in reverse chronological order by default. - [list-aws-member-accounts](https://help.doit.com/docs/cli/generated/command-groups/perfectscale-for-commitments-aws/list-aws-member-accounts.md): Returns all member AWS accounts under the specified AWS organization that have active or historical commitment coverage. Includes 30-day statistics and estimated monthly potential savings (`monthly... - [list-aws-organizations](https://help.doit.com/docs/cli/generated/command-groups/perfectscale-for-commitments-aws/list-aws-organizations.md): Returns all AWS organizations (accounts) accessible to the authenticated tenant. Use as the entry point to discover AWS organization account IDs, and organization-level onboarding status of the ava... - [list-aws-organizations-settings](https://help.doit.com/docs/cli/generated/command-groups/perfectscale-for-commitments-aws/list-aws-organizations-settings.md): Returns one item per onboarded AWS organization. Each item includes that AWS organization's commitments purchasing account (`purchaseAccountId`) and commitment settings for each commitment type act... - [list-aws-planned-purchases](https://help.doit.com/docs/cli/generated/command-groups/perfectscale-for-commitments-aws/list-aws-planned-purchases.md): Returns planned purchases (laddering projections) for the AWS organization. One item per commitment type that has a projection available (typically `compute` and/or `database`; up to four commitmen... - [list-aws-recommendations](https://help.doit.com/docs/cli/generated/command-groups/perfectscale-for-commitments-aws/list-aws-recommendations.md): Returns commitment purchase recommendations for the AWS organization, keyed by commitment type (`compute`, `database`). A commitment type is present only when it is onboarded and a recommendation i... - [list-aws-reserved-instances](https://help.doit.com/docs/cli/generated/command-groups/perfectscale-for-commitments-aws/list-aws-reserved-instances.md): Returns a paginated list of Reserved Instances (RIs) for the specified AWS organization. Optionally filter by state, instance type, instance family, region, and offering class. Omit filters to retu... - [list-aws-savings-plans](https://help.doit.com/docs/cli/generated/command-groups/perfectscale-for-commitments-aws/list-aws-savings-plans.md): Returns a paginated list of Savings Plans for the specified AWS organization. Optionally filter by plan type (`type`) and state (`status`). Omit both filters to return all plans for the AWS organiz... - [list-billing-transfer-end-customers](https://help.doit.com/docs/cli/generated/command-groups/billing-transfer/list-billing-transfer-end-customers.md): Lists the end-customer AWS account mappings under a reseller's program management account, identified by `dpmaId` and `resellerPmaAccountId`. Callable by the reseller who owns the PMA or the distri... - [list-billing-transfer-end-customers-by-reseller](https://help.doit.com/docs/cli/generated/command-groups/billing-transfer/list-billing-transfer-end-customers-by-reseller.md): Same result as `GET /billingtransfer/v1/end-customers`, identified by `resellerPmaAccountId` alone (no `dpmaId` needed). Callable by the reseller who owns the PMA or the distributor who owns its DPMA. - [list-billing-transfer-program-management-accounts](https://help.doit.com/docs/cli/generated/command-groups/billing-transfer/list-billing-transfer-program-management-accounts.md): Lists the caller's program management accounts (PMAs) and the reseller tenants mapped to each one, including AWS Organizations handshake status per account. Distributor-only. - [list-billing-transfer-reseller-accounts](https://help.doit.com/docs/cli/generated/command-groups/billing-transfer/list-billing-transfer-reseller-accounts.md): Lists every reseller program management account (RPMA) node belonging to the calling reseller, with handshake state and status but without end-customer tenants — the reseller-tier analog of `GET /b... - [list-billing-transfer-reseller-accounts-with-tenants](https://help.doit.com/docs/cli/generated/command-groups/billing-transfer/list-billing-transfer-reseller-accounts-with-tenants.md): Lists every reseller PMA node belonging to the calling reseller, each with the end-customer tenants connected under it — the reseller-tier analog of `GET /billingtransfer/v1/programmanagementaccoun... - [list-budget-suggestions](https://help.doit.com/docs/cli/generated/command-groups/budget-suggestions/list-budget-suggestions.md): Returns the pending AI-generated budget suggestions for your account. The set is small (a handful of pending suggestions) and is returned in full. Each suggestion can be accepted (after you create... - [list-budgets](https://help.doit.com/docs/cli/generated/command-groups/budgets/list-budgets.md): Returns a list of budgets that your account has access to. Budgets are listed in reverse chronological order by default. Each budget includes a server-computed `riskStatus` (`atRisk`, `onTrack`, or... - [list-cloud-diagram-activity-groups](https://help.doit.com/docs/cli/generated/command-groups/cloud-diagrams/list-cloud-diagram-activity-groups.md): Returns snapshot activity groups for the specified diagram layer, ordered by timestamp descending. Each group contains a snapshot reference and the individual activity records that belong to it. - [list-cloud-diagram-layer-snapshots](https://help.doit.com/docs/cli/generated/command-groups/cloud-diagrams/list-cloud-diagram-layer-snapshots.md): Returns the list of saved snapshots for the specified diagram layer. - [list-cloud-diagram-node-activities](https://help.doit.com/docs/cli/generated/command-groups/cloud-diagrams/list-cloud-diagram-node-activities.md): Returns individual activity records for the specified component node, ordered by timestamp descending. - [list-cloud-incidents](https://help.doit.com/docs/cli/generated/command-groups/cloud-incidents/list-known-issues.md): Returns a list of all the active and historical cloud incidents for Google Cloud and Amazon Web Services. Incidents are returned in reverse chronological order by default. - [list-cloudflow-connections](https://help.doit.com/docs/cli/generated/command-groups/connections/list-cloudflow-connections.md): Returns a cursor-paginated list of cloud provider connections for the authenticated tenant. - [list-cloudflow-flow-runs](https://help.doit.com/docs/cli/generated/command-groups/cloudflow/list-cloudflow-flow-runs.md): Returns a flow's runs, newest first. Use `mode` to separate test runs from production ones — test runs are included by default. - [list-cloudflow-templates](https://help.doit.com/docs/cli/generated/command-groups/templates/list-cloudflow-templates.md): Returns the catalogue of available CloudFlow templates (blueprints). Templates are read-only. To create a flow from a template, use `POST /flows` with a `templateId`. - [list-cloudflows](https://help.doit.com/docs/cli/generated/command-groups/cloudflow/list-cloudflows.md): Returns a cursor-paginated list of CloudFlows. - [list-commitments](https://help.doit.com/docs/cli/generated/command-groups/commitment-manager/list-commitments.md): Returns a list of commitments for the customer. Commitments are listed in reverse chronological order by default. - [list-contract-templates](https://help.doit.com/docs/cli/generated/command-groups/contract-templates/list-contract-templates.md): Lists contract templates owned by the authenticated tenant (from the bearer token). Requires ContractTemplatesAdmin, DoiT API access (`platform:externalApi`), and the `channelops:contracts:template... - [list-contracts](https://help.doit.com/docs/cli/generated/command-groups/contracts/list-contracts.md): Lists the contracts held by the specified customer. Callable by a T1/T2 PartnerOps principal for its own tenant or any descendant tenant. Read access requires contractsReadOnly, contractsViewer, or... - [list-custom-themes](https://help.doit.com/docs/cli/generated/command-groups/settings/list-custom-themes.md): Returns the list of custom color themes defined for your account. - [list-customer-groups](https://help.doit.com/docs/cli/generated/command-groups/customer-groups/list-customer-groups.md): Returns the ready customer groups owned by the authenticated tenant. Requires the UsersManager permission. - [list-datahub-datasets](https://help.doit.com/docs/cli/generated/command-groups/datahub/list-datahub-datasets.md): Returns a list of all DataHub datasets for the customer. - [list-dimensions](https://help.doit.com/docs/cli/generated/command-groups/dimensions/list-dimensions.md): Returns a list of the dimensions that your account has access to. - [list-folders](https://help.doit.com/docs/cli/generated/command-groups/folders/list-folders.md): Returns Cloud Analytics folders the current customer has access to. Folders are returned in id-ascending order. - [list-gcp-billing-accounts](https://help.doit.com/docs/cli/generated/command-groups/perfectscale-for-commitments-gcp/list-gcp-billing-accounts.md): Returns all GCP Billing Accounts accessible to the authenticated tenant. Use as the entry point to discover GCP billing account IDs, and billing-account-level onboarding status of the available pro... - [list-gcp-billing-accounts-settings](https://help.doit.com/docs/cli/generated/command-groups/perfectscale-for-commitments-gcp/list-gcp-billing-accounts-settings.md): Returns one item per onboarded GCP Billing Account. Each item includes that billing account's recommendation and automation engine settings for each product line activated on it (`compute`). - [list-gcp-planned-purchases](https://help.doit.com/docs/cli/generated/command-groups/perfectscale-for-commitments-gcp/list-gcp-planned-purchases.md): Returns the laddering projections for the billing account, grouped by PS4C product line (`service`) and region. Each service group lists one entry per available `gcp-purchases-projection` document... - [list-gcp-recommendations](https://help.doit.com/docs/cli/generated/command-groups/perfectscale-for-commitments-gcp/list-gcp-recommendations.md): Returns commitment purchase recommendations for the billing account, filtered to the term preferred in the customer's compute settings (`preferredCommitmentPeriod`). - [list-gcp-resource-cuds](https://help.doit.com/docs/cli/generated/command-groups/perfectscale-for-commitments-gcp/list-gcp-resource-cuds.md): Returns a paginated list of resource-based (vCPU / memory) CUDs for the billing account. Optionally filter by CUD state (`status`). Omit to return CUDs in all states. - [list-gcp-spend-cuds](https://help.doit.com/docs/cli/generated/command-groups/perfectscale-for-commitments-gcp/list-gcp-spend-cuds.md): Returns a paginated list of spend-based CUDs for the billing account. Optionally filter by CUD state (`status`). Omit to return CUDs in all states. - [list-geographic-access-countries](https://help.doit.com/docs/cli/generated/command-groups/geographic-access/list-geographic-access-countries.md): Returns the canonical ISO 3166-1 alpha-2 country catalogue used by geographic access policies. - [list-geographic-access-custom-regions](https://help.doit.com/docs/cli/generated/command-groups/geographic-access/list-geographic-access-custom-regions.md): Returns the ready custom regions owned by the authenticated tenant. Requires the UsersManager permission. - [list-insight-resource-results](https://help.doit.com/docs/cli/generated/command-groups/insights/get-insight-resource-results.md): Returns a paginated list of individual resource-level results for a specific insight. Each resource result represents a single cloud resource (e.g. an EC2 instance, a GCS bucket) affected by the in... - [list-insights](https://help.doit.com/docs/cli/generated/command-groups/insights/get-insight-results.md): Returns a paginated list of insights with their aggregate summaries (savings, risk counts). Use query parameters to filter by status, category, provider, or priority. Does not include individual re... - [list-invoices](https://help.doit.com/docs/cli/generated/command-groups/invoices/list-invoices.md): Returns a list of all the current and historical invoices for your organization. Invoices are returned in reverse chronological order by default. - [list-labels](https://help.doit.com/docs/cli/generated/command-groups/labels/list-labels.md): Returns a list of labels that your account has access to. Labels are listed in reverse chronological order by default. - [list-organizations](https://help.doit.com/docs/cli/generated/command-groups/organizations/list-organizations.md): Returns a list of organizations. - [list-platforms](https://help.doit.com/docs/cli/generated/command-groups/platforms/list-platforms.md): Returns a list of all the available platforms. - [list-products](https://help.doit.com/docs/cli/generated/command-groups/products/list-products.md): Returns a list of all the available products of specific platforms. - [list-reports](https://help.doit.com/docs/cli/generated/command-groups/reports/list-reports.md): Returns a list of all Cloud Analytics reports that your account has access to. Reports are returned in reverse chronological order by default. - [list-roles](https://help.doit.com/docs/cli/generated/command-groups/roles/list-roles.md): Returns a list of roles. - [list-service-quotas](https://help.doit.com/docs/cli/generated/command-groups/service-quotas/list-service-quotas.md): Returns the latest service quota usage snapshots collected by DoiT for the authenticated customer. Results include only quotas retained by DoiT's monitoring collectors and are not a complete or liv... - [list-ticket-comments](https://help.doit.com/docs/cli/generated/command-groups/support-requests/list-ticket-comments.md): Returns all permitted comments on a support request. Customers and service-account callers receive only public comments; private comment bodies and attachments are excluded. Callers authenticated w... - [list-ticket-tags](https://help.doit.com/docs/cli/generated/command-groups/support-requests/list-ticket-tags.md): Returns the tags currently set on a support request. - [list-tickets](https://help.doit.com/docs/cli/generated/command-groups/support-requests/list-tickets.md): Returns a list of all historical requests that your account has access to. Tickets are returned in reverse chronological order by default. - [list-users](https://help.doit.com/docs/cli/generated/command-groups/users/list-users.md): Returns a list of users in the organization, including both active users and invited users. When the `email` query parameter is provided, returns only the user matching that email address. If no us... - [patch-anomaly](https://help.doit.com/docs/cli/generated/command-groups/anomalies/patch-anomaly.md): Updates the review status of the anomaly identified by `\{id\}`, the same identifier `getAnomaly` accepts. Mirrors the review workflow available in the console: set `reviewStatus`, and when resolvi... - [query](https://help.doit.com/docs/cli/generated/command-groups/reports/query.md): Runs a report query with the specified configuration without persisting it. Fields that are not populated will use their default values if needed. - [refine-cloud-flow](https://help.doit.com/docs/cli/generated/command-groups/cloudflow/refine-cloud-flow.md): Refines the specified CloudFlow by generating and updating nodes and connections based on the provided natural language intent. The operation streams incremental build events as they are produced. - [remove-ticket-tags](https://help.doit.com/docs/cli/generated/command-groups/support-requests/remove-ticket-tags.md): Removes one or more tags from an existing support request. The operation is surgical — only the tags listed in the request are removed; tags not listed are preserved. Removing a tag that is not pre... - [replace-insight-resource-results](https://help.doit.com/docs/cli/generated/command-groups/insights/post-insight-resource-results.md): Replaces all resource results for the specified insight. Any existing unresolved resource results not present in the new set will be removed. The response includes server-computed fields (severity,... - [resend-invite](https://help.doit.com/docs/cli/generated/command-groups/users/resend-invite.md): Resets the invite expiry to 48 hours from now, invalidates the previous invite token (so old email links stop working), and triggers a fresh invitation email. Works on invites in any state includin... - [search-cloud-diagrams](https://help.doit.com/docs/cli/generated/command-groups/cloud-diagrams/search-cloud-diagrams.md): Full-text search across diagram layers, components by name, and components by property values. Returns three result categories: diagram (matching layers), component (matching components by name), a... - [set-active-theme](https://help.doit.com/docs/cli/generated/command-groups/settings/set-active-theme.md): Sets the theme active for the authenticated user. Send the reserved sentinel `themeId: "default"` to clear the active theme and fall back to the built-in default. Returns the updated active theme. - [submit-ava-feedback](https://help.doit.com/docs/cli/generated/command-groups/ava/ava-feedback.md): Submit feedback on an Ava answer to help improve response quality. - [test-run-cloudflow-flow](https://help.doit.com/docs/cli/generated/command-groups/cloudflow/test-run-cloudflow-flow.md): Runs a flow once as a test, and **accepts an unpublished (draft) flow** — unlike `actions/trigger`, which requires the flow to be published. Use this to verify a newly authored or edited flow befor... - [trigger-cloudflow-webhook](https://help.doit.com/docs/cli/generated/command-groups/cloudflow/trigger-cloudflow-webhook.md): Triggers execution of a published CloudFlow whose first node is a webhook trigger. The request body must be valid JSON and is passed to the flow as webhook payload data. - [unassign-customer-group-user](https://help.doit.com/docs/cli/generated/command-groups/customer-groups/unassign-customer-group-user.md): Unassigns a user from a customer group owned by the authenticated tenant. Requires the UsersManager permission. - [update-alert](https://help.doit.com/docs/cli/generated/command-groups/alerts/update-alert.md): Updates the alert specified by the Id. - [update-allocation](https://help.doit.com/docs/cli/generated/command-groups/allocations/update-allocation.md): Updates the allocation specified by the Id. - [update-annotation](https://help.doit.com/docs/cli/generated/command-groups/annotations/update-annotation.md): Updates the annotation specified by the Id. - [update-asset](https://help.doit.com/docs/cli/generated/command-groups/assets/id-of-asset.md): Updates an existing asset, such as G Suite/Workspace or Office 365 subscription, to add or remove licenses. - [update-aws-feature](https://help.doit.com/docs/cli/generated/command-groups/cloud-connect/update-aws-feature.md): Updates an AWS feature for an existing CloudConnect account. Unlike the CloudFormation variant, this endpoint does not update Firestore channel documents, require a CloudFormation stack ID, or hand... - [update-budget](https://help.doit.com/docs/cli/generated/command-groups/budgets/update-budget.md): Updates the specified budget. - [update-cloudflow-connection](https://help.doit.com/docs/cli/generated/command-groups/connections/update-cloudflow-connection.md): Partially updates a connection. All fields are optional. At most one of `gcpConfig` or `awsConfig` may be set per request. - [update-contract](https://help.doit.com/docs/cli/generated/command-groups/contracts/update-contract.md): Creates a new version of the contract. The contract type is immutable and cannot be changed by an update. - [update-contract-template](https://help.doit.com/docs/cli/generated/command-groups/contract-templates/update-contract-template.md): Updates a contract template owned by the authenticated tenant (from the bearer token). Requires ContractTemplatesAdmin, DoiT API access (`platform:externalApi`), and the `channelops:contracts:templ... - [update-custom-theme](https://help.doit.com/docs/cli/generated/command-groups/settings/update-custom-theme.md): Updates the custom theme specified by the Id. Requires Cloud Analytics Admin permission. - [update-customer](https://help.doit.com/docs/cli/generated/command-groups/customers/update-customer.md): Partially updates the general settings and contact info of the customer identified by `\{customerId\}`. `\{customerId\}` must match the customer resolved from the bearer token; a token scoped to a... - [update-customer-geographic-access-scope](https://help.doit.com/docs/cli/generated/command-groups/geographic-access/update-customer-geographic-access-scope.md): Atomically replaces the geographic scope for a target customer. The authenticated tenant must be the hierarchy root, and the target must be that root customer or one of its child customers. Repeati... - [update-customer-group](https://help.doit.com/docs/cli/generated/command-groups/customer-groups/update-customer-group.md): Updates the name, customer membership, or both for a customer group owned by the authenticated tenant. Requires the UsersManager permission. - [update-datahub-dataset](https://help.doit.com/docs/cli/generated/command-groups/datahub/update-datahub-dataset.md): Updates an existing DataHub dataset's metadata. The `description`, `displayName` and `logoName` fields can be updated. Only the fields present in the request body are changed; an omitted field keep... - [update-folder](https://help.doit.com/docs/cli/generated/command-groups/folders/update-folder.md): Updates the specified folder. All fields are optional. To reparent the folder, set `parentFolderId` to the target folder ID (use "root" for the top level). If a sibling at the target has the same n... - [update-geographic-access-custom-region](https://help.doit.com/docs/cli/generated/command-groups/geographic-access/update-geographic-access-custom-region.md): Updates the name, country membership, or both for a custom region owned by the authenticated tenant. Requires the UsersManager permission. - [update-insight-status (deprecated)](https://help.doit.com/docs/cli/generated/command-groups/insights/update-insight-status.md): :::caution Deprecated This command is deprecated and may be removed in a future release. ::: - [update-label](https://help.doit.com/docs/cli/generated/command-groups/labels/update-label.md): Updates the label specified by the Id. - [update-report](https://help.doit.com/docs/cli/generated/command-groups/reports/update-report.md): Updates a report with the specified configuration. - [update-resource-permission](https://help.doit.com/docs/cli/generated/command-groups/sharing/update-resource-permission.md): Updates the permissions associated with the specified Cloud Analytics resource. Supports Allocations, Alerts, Budgets, and Reports. - [update-ticket](https://help.doit.com/docs/cli/generated/command-groups/support-requests/update-ticket.md): Partially updates a support request. Supports setting the request `status` and/or `assignee`. DoiT employees may set any of `open`, `pending`, `hold`, or `solved` and may set the `assignee`; custom... - [update-user](https://help.doit.com/docs/cli/generated/command-groups/users/update-user.md): Updates user information, including name, job function, phone, language, and role. - [update-user-geographic-access-scope](https://help.doit.com/docs/cli/generated/command-groups/geographic-access/update-user-geographic-access-scope.md): Atomically replaces the geographic scope assigned to a user who belongs to the target customer. The authenticated tenant must be the hierarchy root, and the target must be that root customer or one... - [validate](https://help.doit.com/docs/cli/generated/command-groups/auth/validate.md): Returns the domain and email of the current API user. ## Reference - [Errors and exit codes](https://help.doit.com/docs/cli/generated/errors.md): Every `dci` command reports failures the same way: a single error message on stderr — with a hint when one is available — and a typed exit code that scripts and agents can branch on. You never need...