Ability to generate/view account admins for an account
pending feedback
H
Hibiscus Caribou
Currently there isn't a way to list/retrieve the users with account admin role. This request is to have the ability to generate the report by the users via the UI/API.
Log In
A
Abhishek Thamman
marked this post as
pending feedback
A
Abhishek Thamman
Hi Hibiscus Caribou, Thank you for submitting the request. It is straightforward to check the Principals (Users, User Groups, or Service Accounts) assigned to a specific role including Account Administrator. To do this, please navigate to the role you are interested in, such as Account Admin.
- Go to Account settings -> Access Control -> Roles
- Click on the Account Admin role
- Switch to the "Assigned to" tab
- By default, the list of users who have been assigned the above role is listed. You can switch to the "User Groups" or "Service Accounts" tab to view the other principals that have been assigned this role.
Please note this is behind the PL_ROLE_REUSABILITY_ACROSS_CHILD_SCOPES feature flag.
I have attached a screenshot as well. Please let me know if this helps.
Thanks,
Abhishek Thamman
A
Abhishek Thamman
marked this post as
under review
H
Hibiscus Caribou
Abhishek Thamman
Thanks, the enhancement is much appreciated, can you confirm if there is also a related and supported API call that we can then use for automated reporting?
Ideally the API call would produce a list of all assignments regardless of whether they are user, user group or service account.
A
Abhishek Thamman
Hibiscus Caribou: you can utilise the List Role Assignments by filter API (https://apidocs.harness.io/role-assignments/getfilteredroleassignmentlist) to get the principals that have a specific role assigned. The same API powers the UI that I shared earlier.
Please ensure to reach out to Harness support (support@harness.io) to get the PL_ROLE_REUSABILITY_ACROSS_CHILD_SCOPES feature flag enabled.
Thanks,
Abhishek Thamman