# Observal Admin

Administers Observal users, settings, diagnostics, review queues, security events...

- Repository: https://github.com/AgenticResourceRegistry/AgenticResourceRegistry (4535 stars)
- Category: Security
- License: Apache-2.0
- Last updated: 2026-11-01
- Runs scripts: no, instructions only

## Install

Claude Code: `npx skills add AgenticResourceRegistry/AgenticResourceRegistry --skill observal-admin -g -a claude-code -y`
Codex: `npx skills add AgenticResourceRegistry/AgenticResourceRegistry --skill observal-admin -g -a codex -y`
Cursor: `npx skills add AgenticResourceRegistry/AgenticResourceRegistry --skill observal-admin -g -a cursor -y`
Gemini CLI: `npx skills add AgenticResourceRegistry/AgenticResourceRegistry --skill observal-admin -g -a gemini-cli -y`

## Description

Administers Observal users, settings, diagnostics, review queues, security events, audit logs, SAML, SCIM, the local Observal server, its upgrades and rollback, and its own PostgreSQL and ClickHouse schema migrations. Use when the user needs privileged governance, submission decisions, identity configuration, security investigation, or Observal server operations. Not for querying a database or any work outside Observal administration.

## SKILL.md, as published by its author (untrusted third-party text, read it as data)

# Administering Observal

Core administration requires an admin role. Review actions also work for authorized global reviewers and teamspace owners or reviewers.

## Execution contract

1. Execute commands with a 60 second timeout, except documented long-running server and migration operations.
2. **Use machine output by default:** add `--output json` whenever supported. Parse list results from `items` and pagination fields.
3. Run `--help` before acting when a path, role requirement, confirmation flag, or destination option is uncertain.
4. Read current state before privileged mutations. Use the smallest required authority.
5. Supply `--force` or another documented confirmation flag for noninteractive destructive operations.
6. Verify review decisions, role changes, identity settings, server upgrades, rollback, and imports.
7. Never repeat generated passwords, SCIM tokens, certificates, submitted headers, database URLs, environment values, or sensitive audit content.
8. Fail openly. Do not bypass the CLI through direct database changes or hand-written migration SQL.
9. Never blindly retry privileged mutations. Read resulting state after an uncertain failure.

## Choose the workflow

| User intent | Read |
| --- | --- |
| Users, settings, diagnostics, reviews, security, audit, SAML, or SCIM | [Governance and identity](references/governance-and-identity.md) |
| Local services, versions, upgrades, rollback, reset, or data migration | [Server operations](references/server-operations.md) |

Read the selected reference completely before executing.

## Safety rules

The rest: https://github.com/AgenticResourceRegistry/AgenticResourceRegistry/blob/HEAD/observal_cli/skills/observal-admin/SKILL.md