🤖 Admin Commands

Manage AI admin hosts for LLM-powered administration.

Overview

Admin commands manage AI-powered administrative hosts that can be queried via natural language. Each admin is an LLM endpoint (Ollama, OpenAI, or custom) that can respond to queries with system context.

🗣️ Natural Language

Ask questions, not commands

🔐 Access Control

Group-based permissions

📚 RAG Libraries

Context-aware responses

🔄 Multi-Backend

Ollama, OpenAI, Custom

How It Works

User Query → Cicerone → Admin Registry → LLM Backend → Response Steps: 1. Parse query for admin name (e.g., "darth-ai: status?") 2. Load admin configuration from ~/.cicerone/admins.json 3. Check user's group permissions 4. If library connected, search for relevant documents 5. Send query + context to LLM (Ollama/OpenAI) 6. Return response

Commands

admin new

Create a new admin host configuration.

$ cicerone admin new darth-ai \
  --host 10.0.0.117 \
  --llm-url http://10.0.0.117:11434 \
  --llm-model llama3.2 \
  --groups devops,admins
Flags:
  • --host, -H - Host IP or hostname
  • --port, -p - SSH port (default: 22)
  • --user, -u - SSH username
  • --llm-url, -l - LLM API URL
  • --llm-model, -m - Default model
  • --llm-type, -t - ollama, openai, custom
  • --library, -L - Connect a library
  • --groups, -g - Access groups

admin show

Display all configured admins.

$ cicerone admin show

NAME          HOST              LLM TYPE   MODEL       STATUS
──────────────────────────────────────────────────────────────
darth-ai      [email protected]    ollama     llama3.2    configured
local         wez@localhost     ollama     llama3.2    configured

admin config

Configure an admin's LLM or library.

$ cicerone admin config darth-ai --library docs
$ cicerone admin config darth-ai --llm-model codellama:13b
Flags:
  • --llm-url - Set LLM API URL
  • --llm-model - Set default model
  • --llm-type - Set LLM type
  • --library - Connect library

admin assign

Assign access groups to control permissions.

$ cicerone admin assign darth-ai --groups devops,admins
$ cicerone admin assign darth-ai --add-group developers
$ cicerone admin assign darth-ai --remove-group testers

admin remove

Remove an admin from the registry.

$ cicerone admin remove darth-ai

Removing admin 'darth-ai'
  Host: [email protected]
  LLM:  llama3.2 (http://10.0.0.117:11434)

Continue? [y/N]: y

✓ Admin removed.

admin auths

Show access control matrix.

$ cicerone admin auths

GROUP          darth-ai     local
────────────────────────────────────
devops         ✓            ✓
admins         ✓
all            ✓            ✓

Users in the same group can access
the same admins via 'cicerone do'

Current Admins

No admins configured. Run cicerone admin new <name> to create one.

Configuration Files

~/.cicerone/admins.json    # Admin registry with groups mapping
~/.cicerone/nodes.json    # SSH node registry (synced from admins)