Warning: The most common source of failure in group operations is choosing the wrong identity. Confirm the identity before performing the action.
Group-chat operations support both --as user (UAT user identity) and --as bot (TAT bot identity). Choosing the correct identity is critical for success.
--as user or --as bot) without guessing.| Operation | Recommended Identity | Why |
|---|---|---|
Create group (+chat-create) |
Depends on the scenario | Infer from context |
| Add members (member-management flow) | --as user |
Bot visibility is limited and often fails when the target user is mutually invisible to the bot (232024) |
Update group (+chat-update) |
Owner identity | Permission changes require owner/admin privileges; owner transfer requires owner identity |
When an owner-level action is needed and the owner is unknown, infer in this order:
--owner was not specified -> the owner is the bot (--as bot)--owner ou_xxx was specified -> the owner is that user (--as user)--owner was not specified -> the owner is the current user (--as user)If the query shows that the owner is a third-party user (owner_id is neither the currently authorized user nor the bot), the current identity does not have owner privileges. In that case:
--as bot can still perform admin-level operations such as renaming the group or changing permissions.lark-cli auth login, then perform the action as that owner.If a bot creates a group and --users includes users who are mutually invisible to the bot, the entire request fails with 232043. Use two steps instead:
lark-cli im +chat-create --name "Group Name"--as user