---
title: "aeontel permission"
description: "Manage per-entity ACL grants"
section: "CLI"
group: "Commands"
order: 824
---

## Permission commands

### `aeontel permission list`

List grants visible to the caller

```ts
aeontel permission list [--workspace <id>] [--entity-id <id>] [--subject-id <id>] [--tier <tier>] [--include-deleted <mode>]
```

```bash
aeontel permission list
```

### `aeontel permission update`

Update the tier on an existing grant

```ts
aeontel permission update <id> --tier <tier>
```

```bash
aeontel permission update id_... --tier <tier>
```

### `aeontel permission grant`

Grant a tier on an entity to a subject

```ts
aeontel permission grant --entity-id <id> [--subject-id <id>] [--public] --tier <tier>
```

```bash
aeontel permission grant --entity-id wsp_... --tier <tier>
```

### `aeontel permission restore`

Restore a previously revoked grant

```ts
aeontel permission restore <id>
```

```bash
aeontel permission restore id_...
```

### `aeontel permission revoke`

Revoke a grant (soft-delete; access stops immediately)

```ts
aeontel permission revoke <id>
```

```bash
aeontel permission revoke id_...
```