Skip to content

Products

Compliance Officer Service Expert-led compliance, end to end Compliance Portal Share security documents securely Document Management Draft, approve, and sign your policies Employee Portal Your whole team’s compliance, in one portal Access Review Monitor user access across all your systems AI Agents Run compliance from the tools you use Cookie Banner Consent that follows every visitor's law Device Agent Continuous security posture for every device Open-source platform Deploy Probo on your own infrastructure

Resources

Probo stories How teams get compliant with Probo Blog Ideas and guidance from the Probo team Guides & tools Practical compliance guides and free tools Love from Customers What customers say about working with Probo Changelog Latest product updates Download Get the Device Agent

Company

About The people and vision powering Probo Careers Join the team building Probo Brand assets Official logos and visual resources Security Review our security and compliance posture
Overview Understand Probo and its core concepts Product Explore Probo's GRC capabilities Developers Explore GraphQL, CLI, MCP, n8n, and webhooks Deployment Probo Cloud, self-hosting, and configuration

Explore

GitHub Explore our open-source compliance tools

Try searching for

Tab to move through results · Enter to open · Esc to close

prb connector command reference

Reference for 10 commands under prb connector, including usage, flag types and defaults, required flags, source examples, and implementation links

View as Markdown

Manage connectors. This page documents 10 commands under prb connector.

Flags and examples below come from the command definitions. A Required flag is explicitly marked required by Cobra; an unmarked flag can still be needed by runtime validation or a non-interactive workflow. Empty strings and empty lists are registered defaults, not sample values.

Every command also inherits the global flags. Run prb <command> --help to check your installed version. Replace placeholder IDs and names in source examples before running them. Return to the complete CLI command reference to browse another command.

CommandDescriptionUsageSource
prb connectorManage connectors.prb connector <command>View implementation
prb connector connectCreate a workload-identity connector.prb connector connectView implementation
prb connector createCreate an API-key or client-credentials connector.prb connector createView implementation
prb connector discoverDiscover accounts under a connector.prb connector discover <id>View implementation
prb connector enable-accountsEnable discovered connector accounts.prb connector enable-accounts <connector-id>View implementation
prb connector listList connectors in an organization.prb connector listView implementation
prb connector providersList providers prb connector create can connect.prb connector providersView implementation
prb connector updateRename a connector.prb connector update <connector-id>View implementation
prb connector update-api-keyReplace a connector API key.prb connector update-api-key <connector-id>View implementation
prb connector viewView a connector.prb connector view <id>View implementation

Manage connectors.

prb connector <command>

View command implementation.

Create a workload-identity connector.

prb connector connect

Accepts no positional arguments.

FlagTypeDefaultRequiredDescription
--aws-member-role-namestring""—IAM role assumed in member accounts
--aws-role-arnstring""—IAM role ARN
--azure-client-idstring""—Entra application (client) ID
--azure-environmentstring""—Azure environment (AZURE_PUBLIC, AZURE_GOVERNMENT, …)
--azure-subscription-idstring""—Azure subscription ID
--azure-tenant-idstring""—Entra directory (tenant) ID
--gcp-parentstring""—Cloud Asset parent (organizations/{n} or folders/{n})
--gcp-service-account-emailstring""—GCP service account email to impersonate
--gcp-workload-identity-providerstring""—GCP workload identity provider resource
--jsonbooleanfalse—Output JSON (same as —output json)
--namestring""—A name that distinguishes this credential from other credentials for the same provider. For example, production or main.
--orgstring""—Organization ID
--organizationbooleanfalse—Connect an organization and list its accounts
--output, -ostring""—Output format: json, table (default)
--providerstring""—Connector provider (AWS, GCP, AZURE)
Terminal window
# Connect an AWS account
prb connector connect --name production --provider AWS \
--aws-role-arn arn:aws:iam::123456789012:role/ProboAudit
# Connect an AWS organization
prb connector connect --organization --name production --provider AWS \
--aws-role-arn arn:aws:iam::111111111111:role/ProboAudit
# Connect a GCP organization
prb connector connect --organization --name production --provider GCP \
--gcp-workload-identity-provider projects/123/locations/global/workloadIdentityPools/probo/providers/probo \
--gcp-service-account-email probo-audit@my-project.iam.gserviceaccount.com \
--gcp-parent organizations/123456789

View command implementation.

Create an API-key or client-credentials connector.

prb connector create

Accepts no positional arguments.

Creates a connector for a provider that needs no extra setting. A provider that needs a base URL, slug, or region is connected in the console. Use prb connector providers to list the providers this command accepts.
FlagTypeDefaultRequiredDescription
--api-keystring""—Customer API key (or PROBO_CONNECTOR_API_KEY)
--client-idstring""—OAuth client ID
--client-secretstring""—OAuth client secret (or PROBO_CONNECTOR_CLIENT_SECRET)
--jsonbooleanfalse—Output JSON (same as —output json)
--namestring""RequiredName that distinguishes this credential
--orgstring""—Organization ID
--output, -ostring""—Output format: json, table (default)
--protocolstring""Requiredapi-key or client-credentials
--providerstring""RequiredConnector provider
--scopestring""—OAuth scope. The provider’s own scopes win when it declares them.
--token-urlstring""—Token endpoint. Leave empty when the provider pins one.
Terminal window
# API key from the environment, so it is not a process argument
PROBO_CONNECTOR_API_KEY=<key> prb connector create \
--protocol api-key --provider NOTION --name production
# Or omit the key and type it at the prompt
prb connector create --protocol api-key --provider NOTION --name production
# Client secret from the environment
PROBO_CONNECTOR_CLIENT_SECRET=<secret> prb connector create \
--protocol client-credentials --provider MONGODB_ATLAS \
--name production --client-id <id>
# Or omit the secret and type it at the prompt
prb connector create --protocol client-credentials --provider MONGODB_ATLAS \
--name production --client-id <id>

View command implementation.

Discover accounts under a connector.

prb connector discover <id>

Requires 1 positional argument.

FlagTypeDefaultRequiredDescription
--jsonbooleanfalse—Output JSON (same as —output json)
--output, -ostring""—Output format: json, table (default)

View command implementation.

Enable discovered connector accounts.

prb connector enable-accounts <connector-id>

Requires 1 positional argument.

FlagTypeDefaultRequiredDescription
--accountstring array[]—Account to enable as external-id=name (repeatable)
--jsonbooleanfalse—Output JSON (same as —output json)
--output, -ostring""—Output format: json, table (default)
Terminal window
# Enable one account
prb connector enable-accounts <connector-id> --account 123456789012=Production
# Enable several accounts
prb connector enable-accounts <connector-id> \
--account 123456789012=Production \
--account 111111111111=Staging

View command implementation.

List connectors in an organization.

prb connector list

Accepts no positional arguments.

FlagTypeDefaultRequiredDescription
--jsonbooleanfalse—Output JSON (same as —output json)
--orgstring""—Organization ID
--output, -ostring""—Output format: json, table (default)

View command implementation.

List providers prb connector create can connect.

prb connector providers

Accepts no positional arguments.

Lists providers that connect with an API key or client credentials and no extra setting. A provider that needs a base URL, slug, or region is connected in the console.
FlagTypeDefaultRequiredDescription
--jsonbooleanfalse—Output JSON (same as —output json)
--output, -ostring""—Output format: json, table (default)

View command implementation.

Rename a connector.

prb connector update <connector-id>

Requires 1 positional argument.

FlagTypeDefaultRequiredDescription
--jsonbooleanfalse—Output JSON (same as —output json)
--namestring""—A name that distinguishes this credential from other credentials for the same provider. For example, production or main.
--output, -ostring""—Output format: json, table (default)

View command implementation.

Replace a connector API key.

prb connector update-api-key <connector-id>

Requires 1 positional argument.

FlagTypeDefaultRequiredDescription
--api-keystring""—Customer API key (or PROBO_CONNECTOR_API_KEY)
--jsonbooleanfalse—Output JSON (same as —output json)
--output, -ostring""—Output format: json, table (default)

View command implementation.

View a connector.

prb connector view <id>

Requires 1 positional argument.

FlagTypeDefaultRequiredDescription
--jsonbooleanfalse—Output JSON (same as —output json)
--output, -ostring""—Output format: json, table (default)

View command implementation.