Audit and Review User Access

Generate comprehensive access reports, identify security risks, ensure compliance, and prepare for audits.

Quarterly Access Review Workflow

Step 1: Get Complete User List

GET /admin/api/users/list

Export to spreadsheet for review.

Step 2: Check Each User's Access

# For each user:
GET /authz/api/v1/users/user-XXX/roles
GET /authz/api/v1/users/permissions?userId=user-XXX

Step 3: Identify Issues

Red Flags:

• Users with no groups (direct role assignments)

• Users with admin access who shouldn't have it

• Inactive users (last login >90 days)

• Contractors with permanent employee access

• Users in too many groups (>5)

Step 4: Generate Report

Report Template:

Step 5: Take Action

# Disable inactive users
PUT /admin/api/users/user-124 {"enabled": false}
# Remove excess groups
PUT /admin/api/users/user-124/remove-groups {...}

APIs Used

1. GET /admin/api/users/list - All users with details

2. GET /authz/api/v1/users/:userId/roles - User roles

3. GET /authz/api/v1/users/permissions - Effective permissions

4. GET /admin/api/users/count - Total user count