-
Type:
Suggestion
-
Resolution: Unresolved
-
Component/s: Directory - User Management REST API
-
2
Issue Summary
The “Get all users” API has been used to get a list of users with accountIds. Since the documentation now states that this endpoint is no longer available for Connect apps, partners developing Connect apps need other means to get that same list of users/accountIds.
Ultimately, we need a way for Connect apps to get a list of active accountIds from REST API without relying on user-provided credentials:
- That makes auditing much more difficult, and the lack of restriction we can put on the user means they could inadvertently grant us much more access than we need.
- In addition, two different parties would be required to keep generated passwords safe vs. Atlassian Connect where all credentials are handled out-of-band by machines.
Workaround
Currently there is no known workaround for this behavior. A workaround will be added here when available