Get Group Level Changes

[jaya krishna gonuguntla _CW_]

Hi,

We have a requirement to identify the groups whose permissions have changed for a Confluence spaces. We can identify updated spaces or pages using their last modified timestamp.

However, if a user is added or removed from a group that already has access to a space or page (No changes are executed against Space/Page). How can we detect that change using the Confluence REST APIs?

If you've implemented something similar before, could you please let me know the approach or process you followed?

Thanks,

[Tomislav Tobijas]

Not sure if you'll be able to use Confluence REST API here @jaya krishna gonuguntla _CW_ 

Instead, I'd go with Atlassian Organization REST API / Events. I've only pulled events from here once or twice, and I cannot remember what exactly you'll get as a response, but it might be helpful. 

We did pull data manually through Administration audit logs and based on that, we tracked changes to specific group membership as part of our yearly reviews. 👀

[jaya krishna gonuguntla _CW_]

Hi @Tomislav Tobijas ,

Thanks for the inputs.
I will check and get back if I need additional inputs.

Thanks,

[Germán Morales _ Hiera]

Hi @jaya krishna gonuguntla _CW_ , last-modified can't see this: group membership is an identity change, not a space edit. The audit log is where it surfaces.

• Poll GET /wiki/rest/api/audit by startDate and endDate and pick out the group add and remove records since your last run. Needs Confluence admin.
• Map each changed group to spaces with the space permissions endpoints.
• No audit access? Snapshot each group's members on a schedule and diff them, since membership carries no change timestamp.

Endpoint reference: Confluence audit API.

[jaya krishna gonuguntla _CW_]

Hi  @Germán Morales _ Hiera,

Thanks for the inputs.
I will check and get back if I need additional inputs.

Thanks,