Identify users via API that are regular project users versus federated or built-in (e.g., charts) users
Expand the API to allow a way to identify and differentiate federated users and other non-manageable users (like "Charts User") from regular project users in MongoDB Atlas using API output, similar to how the Atlas UI visually marks federated users. For example, the Atlas UI displays a greyed-out edit icon and the ScreenTip displays a "Roles are managed through federated role mapping".
Anthony
shared this idea
-
Anthony
commented
In order to import existing, manually created projects into Terraform for management, we need to identify the users being granted access within the project. We would like to know how to differentiate the Federated users and other non-manageable users (e.g., "Charts User") so we can focus on explicit, standalone users that are defined for the project. That way, we can avoid having to create them unnecessarily (because they will already be mapped using federation or created / managed by MongoDB directly).
-
AdminFuat
(Admin, MongoDB)
commented
Hi Anthony, thank you for your feedback. What are you trying to achieve by identifying users? If your aim is to make sure only users with certain email domains can access your organization, you can configure domain access list for your organization via federation application. This way, only users from allowed domains can be aded to your organization/projects.
As a workaround for your exact request, for now you can get the whole user list and then filter-out users with federated domain (i.e. usernames ending with "@<yourdomain>"). The result will give you all guest users including the proxy user added by MongoDB charts.
(Edited by admin)