For AI agents: a documentation index is available at the root level at /llms.txt and /llms-full.txt. Append /llms.txt to any URL for a page-level index, or .md for the markdown version of any page.
      • AstroFully-managed data operations, powered by Apache Airflow.
      • Astro Private CloudRun Airflow-as-a-service in your environment.
      • Professional ServicesExpert Airflow services for your enterprise's success.
    • Tools
      • Cosmos
      • Orbiter
      • CLI
      • AI SDK
      • Agents
      • Blueprint
      • UpdatesThe State of Airflow 2026See the insights from over 5,800 data practitioners in the full report. Download Now ➔
  • Customers
  • Docs
    • Insights
      • Blog
      • Webinars
      • Resource Library
      • Events
    • Education
      • Academy
      • What is Airflow?
  • Pricing
Get Started Free
    • Astro CLI
    • Quickstart
    • CLI reference
      • astro completion
      • astro api
      • astro auth
      • astro config
      • astro context
      • astro dbt
      • astro deploy
      • astro deployment
        • astro deployment airflow upgrade
        • astro deployment create
        • astro deployment delete
        • astro deployment hibernate
        • astro deployment inspect
        • astro deployment list
        • astro deployment logs
        • astro deployment runtime migrate
        • astro deployment runtime upgrade
        • astro deployment service-account
        • astro deployment team
        • astro deployment update
        • astro deployment user
        • astro deployment wake-up
      • astro dev
      • astro ide
      • astro login
      • astro logout
      • astro organization
      • astro otto
      • astro remote
      • astro run
      • astro team
      • astro telemetry
      • astro user create
      • astro version
      • astro workspace

Product

  • Platform Overview
  • Astro
  • Astro Observe
  • Astro Private Cloud
  • Security & Trust
  • Pricing

Tools & Services

  • Cosmos
  • Docs
  • Professional Services
  • Product Updates

Use Cases

  • AI Ops
  • Data Observability
  • ETL/ELT
  • ML Ops
  • Operational Analytics
  • All Use Cases

Industries

  • Financial Services
  • Gaming
  • Retail
  • Manufacturing
  • Healthcare
  • All Industries

Resources

  • Academy
  • eBooks & Guides
  • Blog
  • Webinars
  • Events
  • The Data Flowcast Podcast
  • All Resources

Airflow

  • What is Airflow
  • Airflow on Astro
  • Airflow 3.0
  • Airflow Upgrades
  • Airflow Use Cases
  • Airflow 2.x End of Life

Company

  • Our Story
  • Customers
  • Newsroom
  • Careers
  • Contact

Support

  • Knowledge Base
  • Status
  • Contact Support
GitHubYouTubeLinkedInx
  • Legal
  • Privacy
  • Terms of Service
  • Consent Preferences

  • Do Not Sell or Share My Personal information
  • Limit the Use Of My Sensitive Personal Information

Apache Airflow®, Airflow, and the Airflow logo are trademarks of the Apache Software Foundation. Copyright © Astronomer 2026. All rights reserved.

LogoLogo
CLI referenceastro deployment

astro deployment user

Edit this page
Built with
The behavior and format of this command differs depending on what Astronomer product you’re using. Use the following tabs to change between product contexts.

Manage Deployment-level users.

Astro
APC

Usage

This command has several subcommands. Read the following sections to learn how to use each subcommand.

astro deployment user add

Give an existing user in a Workspace access to a Deployment within that Workspace.

You must be a Deployment Admin for the given Deployment to run this command.

Usage

1astro deployment user add --email=<user-email-address> --deployment-id=<user-deployment-id> --workspace-id=<user-workspace-id> --role=<user-role>

Options

OptionDescriptionPossible values
--deployment-id (Required)The ID for the Deployment that the user is added toAny valid Deployment ID
-e,--email (Required)The user’s emailAny valid email address
--role (Required)The role assigned to the userPossible values are DEPLOYMENT_ADMIN or the custom role name. The default is DEPLOYMENT_ADMIN.
--workspace-idThe workspace assigned to the DeploymentAny valid Workspace ID

astro deployment user list

View a list of all Workspace users who have access to a given Deployment.

Usage

1astro deployment user list --deployment-id=<deployment-id>

Options

OptionDescriptionPossible values
--deployment-id (Required)The Deployment whose users you want to viewAny valid Deployment ID
--jsonOutput the response as JSON. Shorthand for --output json. Mutually exclusive with -o/--output.None
-o,--outputFormat the output. The default is table.table, json, or template
--templateFormat the output using a Go template. Use with --output template.Any valid Go template string
--workspace-idThe Workspace whose users you want to viewAny valid Workspace ID

astro deployment user remove

Remove access to a Deployment for an existing Workspace user, the command line prompts you for the user email address or user ID for the user you want to remove. To grant that same user a different set of permissions instead, modify their existing Deployment-level role by running astro deployment user update.

You must be a Deployment Admin for the given Deployment to run this command.

Usage

1astro deployment user remove --deployment-id=<deployment-id> --email=<user-email-address> --workspace-id=<workspace-id>

Options

OptionDescriptionPossible values
--deployment-id (Required)The Deployment from which to remove the userAny valid Deployment ID
-e,--email (Required)The user’s emailAny valid email address
--workspace-idThe Workspace from which to remove the userAny valid Workspace ID

astro deployment user update

Update a user’s role in a given Deployment.

Usage

1astro deployment user update --email=<email=address> --deployment-id=<deployment-id> --role=

Options

OptionDescriptionPossible values
--deployment-id (Required)The Deployment that you’re searchingAny valid Deployment ID.
-e,--email (Required)The user’s emailAny valid email address
--roleThe role for the user.Possible values are DEPLOYMENT_ADMIN or the custom role name. The default value is DEPLOYMENT_ADMIN.

Related documentation

  • Manage User Permissions on Astronomer