Identity and access

Sign in, enroll robots and share access.

servo login signs in the CLI and SDK; servo logout signs out. Connect your Hugging Face account to import checkpoints. Approve model download access when asked; for a gated repository, accept its terms on Hugging Face first.

Robot identity

Enroll the robot computer; Python running there then acts as that robot.

robot computer

servo agent install --name robot-1

An organization admin runs the servo robot approve command it prints, from their own computer.

When the admin approves, the command prints Enrolled robot robot-1. and Next: servo doctor.

Members cannot register or enroll robots.

Share access

Grant a person access to a robot:

CLI

your computer

servo access grant robot-1 [e-mail] --role write

Sample output

[e-mail] now has write on robot robot-1.

List who has access:

your computer

servo access list robot-1

Sample output

ID                 Subject             Kind         Role    Directory
----------------   -----------------   ----------   -----   ---------
rag_e66a84c7961c   [e-mail]   individual   write   -

Python

Grant and list access:

your computer

import servo

sv = servo.Servo()
sv.access.grant("[e-mail]", robot="robot-1", role="write")
for grant in sv.access.list(robot="robot-1"):
    print(grant.subject, grant.role)

Sample output

[e-mail] write

Role	Permission
read	Inspect robot and sessions
write	Start and stop robot sessions; includes read

Granting, listing and revoking need an organization admin or a robot manager; the person granted must be a current organization member.

A Google Group can replace the email once an admin connects Google Workspace.

Organization role	Can do
Admin	Register, enroll, approve, retire and share robots; invites, settings, billing and Google Workspace
Member	Use only robots granted to them

Revoke access:

CLI

your computer

servo access revoke robot-1 [e-mail]

Sample output

Revoked [e-mail] on robot robot-1.

Python

Revoke the same grant:

your computer

sv.access.revoke("[e-mail]", robot="robot-1")

An organization admin can run servo robot remove NAME to revoke the robot’s installations while retaining its history.