Product Announcements — Tim J (Veracode PM) (Veracode) asked a question.
🌟Product Update: New Search features in the Users API
Following on this morning's announcement about the new Users administration user interface, I wanted to point out that there is also a new search capability in the Users REST API. You can now use the REST API to search for users by the following:
- username
- first name
- last name
- email address
- API ID
- login enabled
- SAML user
- login status
- role
- teams
The API documentation has been updated to show the new endpoint. Please let us know if you have any questions.
.png){kind=logo}
I have tried it out this morning with the new endpoint. I tried searching by email and then tried with the login_enabled, but neither seem to work. I get a response back "forbidden":
says Access Denied, but I know my creds are correct.
here is the url:
https://api.veracode.com/api/authn/v2/users/search?login_enabled=true
Let me know if I am missing a detail. Thanks,
Jason
@jason.curtis (Community Member) , what roles do your API credentials have? You need to have either Administrator (human user) or Admin API (API service account) to call this endpoint.
If you have the correct roles, would you mind checking the headers in the response and letting us know the value of the x-conversation-id header? Your syntax is correct so something else may be happening.
Sure..let me check that too. This is an api user and has these roles:
Here is the headers:
@jason.curtis (Community Member) , thanks for flagging this. I've confirmed that this endpoint is not accessible with an API Service Account and have filed a bug ticket with our engineering team to fix the issue. I'll post back here when we've addressed it.
@jason.curtis (Community Member) and folks - we've fixed the problem and you should now be able to access this endpoint with an API Service Account with the Admin API role. Thanks again for reporting the issue!
cool so now I get a big bug bounty, right? haha! Thank you!
You got it @jason.curtis (Community Member) ! Your 🎁 is on the way 🙂 Thanks again for catching the bug. The team is fixing it now.
@Tim J (Veracode PM) (Veracode) Thank you very much for the quick turnaround on this. I have just tested several queries and now it is working with my api user account which will be very helpful. Thanks again. I will let you know if I run into issues on my other tests.
Thanks,
Jason