Skip to main content Link Menu Expand (external link) Document Search Copy Copied
Auth0 CLI

auth0 network-acl update

Update a network ACL. To update interactively, use “auth0 network-acl update” with no arguments. To update non-interactively, supply the description, active, priority, and rule through flags.

Usage 

auth0 network-acl update [flags]

Examples 

  auth0 network-acl update <id>
  auth0 network-acl update <id> --priority 5
  auth0 network-acl update <id> --active true
  auth0 network-acl update <id> --description "Updated description"
  auth0 network-acl update <id> --rule '{"action":{"block":true},"scope":"tenant","match":{"ipv4_cidrs":["192.168.1.0/24"]}}'
  auth0 network-acl update <id> --description "Complex Rule updated" --priority 1 --active true --rule '{"action":{"block":true},"scope":"tenant","match":{"ipv4_cidrs":["192.168.1.0/24"],"geo_country_codes":["US"]}}'
  auth0 network-acl update <id> --rule '{"action":{"block":true},"scope":"tenant","match_all":true}'

  # Early Access (auth0_managed and http_message_signature match/not_match value):
  auth0 network-acl update <id> --rule '{"action":{"allow":true},"scope":"tenant","match":{"auth0_managed":["auth0.low_reputation"]}}'
  auth0 network-acl update <id> --rule '{"action":{"allow":true},"scope":"authentication","match":{"http_message_signature":{"keys":[{"id": "key_123"},{"id": "key_456"}]}}}'

Flags 

      --active string        Whether the network ACL is active ('true' or 'false').
  -d, --description string   Description of the network ACL (Eg. "Block suspicious IPs").
      --json                 Output in JSON format
  -p, --priority int         Priority of the network ACL (Eg. 5). (default 1)
      --rule string          Network ACL rule configuration in JSON format (required for non-interactive mode).

Inherited Flags 

      --agent-mode      Output JSON, disable prompts and colors. Auto-enabled for AI agents; set AUTH0_AGENT_MODE=false to disable.
      --debug           Enable debug mode.
      --no-color        Disable colors.
      --no-input        Disable interactivity.
      --tenant string   Specific tenant to use.