nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Need endpoints for Group membership

James.Rodgers

I am trying to automate user access reviews for various software tools. At the moment it seems it will be impossible to automate Bitbucket because there is no endpoint that gives group membership information. I can find which repos are in what groups and get a list of all users, but there are no endpoints for getting all groups or group memberships, so it is not possible to pull together a full access review without getting into the ui. This seems like a huge hole in the API.

Accepted answers

James.Rodgers

For posterity, I did get this to work using the v1.0 api endpoint https://api.bitbucket.org/1.0/groups/{workspace} and an OAuth token created in bitbucket workspace settings / Apps and features / OAuth consumers. I granted it read permissions on Account, Workspace membership and Repositories.

All comments

Arkadiusz Wroblewski

Hello @James_Rodgers

You’ll want to start by calling GET [https://api.bitbucket.org/1.0/groups/](https://api.bitbucket.org/1.0/groups/){workspace_id}/ to pull your list of groups. Once you have those, you can iterate through the group slugs using the /members endpoint to see exactly who is assigned to each one. To get the full "effective access" picture, you'll then need to cross-reference those members with the 2.0 repository permission endpoints to see what those groups are actually allowed to do.