# Sharing

> Inspect, grant, and revoke specialist, resource, and credential access.

Source: https://docs.generalinput.com/cli/sharing



`geni sharing` manages direct grants using the same ownership and workspace checks as the dashboard. Commands print JSON. Ownership transfers remain in the dashboard.

```sh
geni sharing inspect proj_example --kind specialist
geni sharing grant proj_example --kind specialist --member mem_example --role editor
geni sharing grant wf_example --kind workflow --organization --role runner
geni sharing revoke cred_example --kind credential --member mem_example
```

Choose exactly one audience for `grant` and `revoke`: `--member <membershipId>` or `--organization`. Use `geni workspace members` to find membership ids. Granting a role to an existing collaborator updates that direct grant.

| Kind                     | Roles                        |
| ------------------------ | ---------------------------- |
| `specialist`, `workflow` | `viewer`, `runner`, `editor` |
| `app`                    | `runner`, `editor`           |
| `skill`                  | `viewer`, `editor`           |
| `credential`             | `user`                       |

`inspect` returns `organizationRole` and `collaborators`. Specialist grants apply to its contents. Removing a direct grant can leave access through the organization or containing specialist; inspect those grants before concluding access is gone. Changing grants requires ownership.