Programmatically get a list of admin users in Crowd connected apps

[Deleted user]

The apps vers:

Crowd v3.2.5
Jira v7.5.2
Wiki v6.6.4
Crucible v4.5.2

Thanks!

[Bruno Vincent · Accepted solution]

You can use Crowd's REST API.

For instance, if you want to get the nested members of the confluence-administrators group:

curl -X GET -u "confluence:********" -H "Accept: application/json" 'http://localhost:8095/crowd/rest/usermanagement/1/group/user/nested?groupname=confluence-administrators'

where confluence and ******** are the application name and application password of the Confluence application as defined in Crowd

[Deleted user]

Hi,
Is the app-administrators group name hard coded? or is it possible that the group name be different in wiki/jira/crucible/crowd?
I'm trying to find a solution that would be flexible enough to retrieve the admins even in case an app admin decides to change the admin group name.. 
Thank you for the prompt reply!

[Bruno Vincent]

Hi @[deleted]

There are actually pre-defined groups when you install those products (e.g. jira-administrators, confluence-administrators, crowd-administrators). However it does not mean that only those groups have administration rights. Other users and groups may have been granted administration rights as detailed in Atlassian's documentation:

• Managing global permissions in Jira
• Managing global permissions in Confluence
• Granting Crowd administration rights to a user
• Granting administrator privileges in Fisheye/Crucible

As of today, permissions are managed in each of those products. So you will need to rely upon each product's API to retrieve its administrators (provided that such feature is implemented in the APIs)

Atlassian provides the following documentation for Jira: https://confluence.atlassian.com/jira/retrieving-the-jira-administrator-192836.html

You can also use Jira's REST API though you might face the following issue: https://jira.atlassian.com/browse/JRASERVER-47372

In Crucible you can use Crucible's REST API.

As far as I know and after a quick look at Confluence and Crowd's REST APIs, this does not seem to be possible as of today, at least without running SQL queries.

That said, there may be a better way to retrieve such information in the future as Atlassian has announced that Crowd will soon be able to centrally manage the permissions for all those products.