# Authz

URL: https://docs.hanzo.ai/docs/cli/authz

> The `hanzo authz` commands.

Also for this capability: [API](https://docs.hanzo.ai/docs/openapi/authz) · **CLI** · [SDKs](https://docs.hanzo.ai/docs/sdks)

The access decision behind an org-scoped call: who may do what, where, answered allow or deny.

[API reference →](https://docs.hanzo.ai/docs/openapi/authz)

```bash
hanzo authz health
```

Every command takes `--json` for the raw response and `--help` for its own flags. Sign in once with `hanzo auth login`; the commands below use that session, and the org they act in is the one it carries.

| Command              | What it does                               |
| -------------------- | ------------------------------------------ |
| `hanzo authz check`  | Ask whether a subject may act on an object |
| `hanzo authz health` | Liveness of the policy engine              |
| `hanzo authz readyz` | Readiness of the policy engine             |