Manage Access Changes

Handle day-to-day access changes: promotions, team transfers, temporary access grants, and permission adjustments.


Common Scenarios

Scenario 1: Promotion to Team Lead

User needs elevated permissions.

# Add to team lead group PUT /admin/api/users/user-123/assign-groups { "groupIds": ["group-team-leads"] }

Scenario 2: Team Transfer

User moving from Analytics to Data Engineering.

# Remove from old group PUT /admin/api/users/user-123/remove-groups { "groupIds": ["group-analytics"] } # Add to new group PUT /admin/api/users/user-123/assign-groups { "groupIds": ["group-data-engineering"] }

Scenario 3: Temporary Project Access

Grant elevated access for 2 weeks.

# Add to project group PUT /admin/api/users/user-123/assign-groups { "groupIds": ["group-migration-project"] } # Set calendar reminder to remove after project

Scenario 4: Update User Info

Name change, new manager, department transfer.

PUT /admin/api/users/user-123 { "firstName": "Sarah", "lastName": "Chen-Martinez", "attributes": { "manager": ["new-manager@company.com"], "department": ["Engineering - Platform"] } }

APIs Used

  1. PUT /admin/api/users/:userId - Update user details

  2. PUT /admin/api/users/:userId/assign-groups - Add to groups

  3. PUT /admin/api/users/:userId/remove-groups - Remove from groups

  4. GET /authz/api/v1/users/:userId/roles - Verify changes