Audit and Review User Access

Generate comprehensive access reports, identify security risks, ensure compliance, and prepare for audits.

Quarterly Access Review Workflow

Step 1: Get Complete User List

Bash

GET /admin/api/users/list

Export to spreadsheet for review.

Step 2: Check Each User's Access

Bash

# For each user:

GET /authz/api/v1/users/user-XXX/roles

GET /authz/api/v1/users/permissions?userId=user-XXX

Step 3: Identify Issues

Red Flags:

• Users with no groups (direct role assignments)
• Users with admin access who shouldn't have it
• Inactive users (last login >90 days)
• Contractors with permanent employee access
• Users in too many groups (>5)

Step 4: Generate Report

Report Template:

Step 5: Take Action

Bash

# Disable inactive users

PUT /admin/api/users/user-124 {"enabled": false}

# Remove excess groups

PUT /admin/api/users/user-124/remove-groups {...}

APIs Used

1. GET /admin/api/users/list - All users with details
2. GET /authz/api/v1/users/:userId/roles - User roles
3. GET /authz/api/v1/users/permissions - Effective permissions
4. GET /admin/api/users/count - Total user count