kf identity
Create parties, addresses, and contact points for the tenant.
kf identity assign-party-role
Assign a role such as CUSTOMER, SUPPLIER, CARRIER, or BUYER_CONTACT to a Party within a tenant, channel, location, order, or app scope.
Assign a role such as CUSTOMER, SUPPLIER, CARRIER, or BUYER_CONTACT to a Party within a tenant, channel, location, order, or app scope. Emits identity.party_role.assigned with ids and role facts only.
| Flag | Required | Description |
|---|---|---|
--tenant <id> | yes | Target tenant id. |
--environment <id> | no | Target environment id; defaults to the active profile environment. |
--actor-type <type> | yes | Actor type (USER, SYSTEM, CONNECTOR, AGENT, SERVICE). |
--actor-id <id> | yes | Actor id. |
--idempotency-key <key> | no | Idempotency key for safe retries. Generated when omitted. |
--party-id <value> | yes | Party id. |
--role-type <value> | yes | Role type. |
--scope-type <value> | yes | Scope type. |
--scope-id <value> | no | Scope id. |
--valid-from <value> | no | ISO date/time |
--valid-to <value> | no | ISO date/time |
Example
kf identity assign-party-role --tenant tnt_demo --actor-type USER --actor-id usr_sam --party-id <value> --role-type <value> --scope-type <value>kf identity create-address
Insert one addresses row at status=ACTIVE attached to a parent Party.
Insert one addresses row at status=ACTIVE attached to a parent Party. Address values stay on the row; identity.address.created references address + party by id only.
| Flag | Required | Description |
|---|---|---|
--tenant <id> | yes | Target tenant id. |
--environment <id> | no | Target environment id; defaults to the active profile environment. |
--actor-type <type> | yes | Actor type (USER, SYSTEM, CONNECTOR, AGENT, SERVICE). |
--actor-id <id> | yes | Actor id. |
--idempotency-key <key> | no | Idempotency key for safe retries. Generated when omitted. |
--party-id <value> | yes | Party id. |
--kind <value> | yes | Kind. |
--line1 <value> | yes | Line1. |
--line2 <value> | no | Line2. |
--line3 <value> | no | Line3. |
--city <value> | no | City. |
--region <value> | no | Region. |
--region-code <value> | no | Region code. |
--postal-code <value> | no | Postal code. |
--country-code <value> | yes | Country code. |
Example
kf identity create-address --tenant tnt_demo --actor-type USER --actor-id usr_sam --party-id <value> --kind <value> --line1 <value> --country-code <value>kf identity create-contact-point
Insert one contact_points row at status=ACTIVE attached to a parent Party.
Insert one contact_points row at status=ACTIVE attached to a parent Party. The raw value (email, phone, webhook URL) stays on the row; identity.contact_point.created carries party + contact-point ids only.
| Flag | Required | Description |
|---|---|---|
--tenant <id> | yes | Target tenant id. |
--environment <id> | no | Target environment id; defaults to the active profile environment. |
--actor-type <type> | yes | Actor type (USER, SYSTEM, CONNECTOR, AGENT, SERVICE). |
--actor-id <id> | yes | Actor id. |
--idempotency-key <key> | no | Idempotency key for safe retries. Generated when omitted. |
--party-id <value> | yes | Party id. |
--contact-type <value> | yes | Contact type. |
--value <value> | yes | Value. |
--value-normalized <value> | no | Value normalized. |
--preferred <value> | no | Preferred. |
--preferred-language <value> | no | Preferred language. |
--preferred-locale <value> | no | Preferred locale. |
Example
kf identity create-contact-point --tenant tnt_demo --actor-type USER --actor-id usr_sam --party-id <value> --contact-type <value> --value <value>kf identity create-party
Insert one parties row at status=ACTIVE.
Insert one parties row at status=ACTIVE. PII (legal_name, given_name, family_name) lives only on the row; the emitted identity.party.created event references the party by id only.
| Flag | Required | Description |
|---|---|---|
--tenant <id> | yes | Target tenant id. |
--environment <id> | no | Target environment id; defaults to the active profile environment. |
--actor-type <type> | yes | Actor type (USER, SYSTEM, CONNECTOR, AGENT, SERVICE). |
--actor-id <id> | yes | Actor id. |
--idempotency-key <key> | no | Idempotency key for safe retries. Generated when omitted. |
--party-type <value> | yes | Party type. |
--legal-name <value> | no | Legal name. |
--display-name <value> | no | Display name. |
--given-name <value> | no | Given name. |
--family-name <value> | no | Family name. |
--external-ref <value> | no | External ref. |
Example
kf identity create-party --tenant tnt_demo --actor-type USER --actor-id usr_sam --party-type <value>kf identity erase-party
GDPR-style erasure of a Party plus all child Addresses and ContactPoints.
GDPR-style erasure of a Party plus all child Addresses and ContactPoints. Pseudonymizes PII columns in place to preserve referential integrity for orders and fulfillments. Requires an APPROVED approval_request scoped to (Party, partyId, EraseParty). Risk class R4, irreversible.
| Flag | Required | Description |
|---|---|---|
--tenant <id> | yes | Target tenant id. |
--environment <id> | no | Target environment id; defaults to the active profile environment. |
--actor-type <type> | yes | Actor type (USER, SYSTEM, CONNECTOR, AGENT, SERVICE). |
--actor-id <id> | yes | Actor id. |
--idempotency-key <key> | no | Idempotency key for safe retries. Generated when omitted. |
--party-id <value> | yes | Party id. |
--approval-request-id <value> | yes | Approval request id. |
--reason <value> | no | Reason. |
Example
kf identity erase-party --tenant tnt_demo --actor-type USER --actor-id usr_sam --party-id <value> --approval-request-id <value>