---
title: blossom permission_set:init
url: "/docs/reference/cli/permission_set/init/"
canonical_url: https://docs.blossom88.com/docs/reference/cli/permission_set/init/
markdown_url: https://docs.blossom88.com/docs/reference/cli/permission_set/init.md
summary: Create a starter permission_set.yml
categories:
- cli
- reference
---

# blossom permission_set:init

Create a starter permission_set.yml

## Usage

    blossom permission_set:init [--type TYPE] [--force]

## Flags

| Flag | Description |
| --- | --- |
| `--type` | Permission set type: operator, billing_viewer, or custom |
| `--force, -f` | Overwrite an existing starter file |

Examples:

    blossom permission_set:init
    blossom permission_set:init --type billing_viewer
    blossom permission_set:init --type custom

permission_set.yml:

```yaml
permission_set:
  name: Operator
  description: Can operate apps, services, shell sessions, database_instances, and backups. Cannot manage billing or members.
  access_mode: custom
  scopes:
    - app:read
    - environment:read
    - environment:write
    - container:read
    - activity:read
    - shell:read
    - shell:write
```

Creates a starter permission set payload file at permission_set.yml by default.
The default type is `operator`. Edit the file, then create the Permission Set:

    blossom permission_set:create --data permission_set.yml

List the current permission scopes before editing custom scopes:

    blossom permission_set:scopes

Supported starter types:

- `operator`
- `billing_viewer`
- `custom`