nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

ScriptRunner Groovy Script to get all users and project roles they are assigned

Whitni Smith_dtxmgr

What I want to accomplish: get a list of all the Jira instance active users and the projects and project roles they belong to by calling all the projects and then iterating through the project roles and getting all the actors.

I'm working with ~500 active users

I've only used ScriptRunner on DC and at a novice level or manipulating existing scripts and there's a lot missing in Cloud so I've been unsuccessful in converting a DC script to Cloud, so I started with an existing Cloud script and I'm stuck and could use some help.

I've anonymized the script I'm working with and pasted it below.
I can successfully get all the project information but unsuccessful in project roles and actors. AND if I try to return the results formatted, I only get the query parameters spit back out, nothing about the projects.

NOTE: I am OK if output is by project and I have to scrub the data and sort it to merge all the results for a user (example: user Jacob McCarthy is in project A as developer, user Jacob McCarthy is in project B as administrator, user Jacob McCarthy is in project F as collaborator)

What I errors I know exist (I don't know how to fix them) -
Iterating the role ID into the API call (id isn't a class -- is the error I get)

import groovy.json.JsonSlurper


// String buffer to hold results

def sb = []


 // Get list of all the projects

def getProjects = get("https://your-domain.atlassian.net/rest/api/3/project/search")

    .header('Content-Type', 'application/json')

    .asJson()


// Get JSON body contents of the HTTP response

def content = getProjects.body


// Turn raw body into JSON 

def json = new JsonSlurper().parseText(content.toString())


json.each { project ->

    sb.add(project['key'])


// For each project, get the list of roles

    def getRoles = get("https://your-domain.atlassian.net/rest/api/3/project/${project.key}/role")

        .header('Content-Type', 'application/json')

        .asJson()

    
    getRoles.body.each { role ->

        def roleId = id

        def getRoleMembers = get("https://your-domain.atlassian.net/rest/api/3/role/${roleId}/actors")

            .header('Content-Type', 'application/json')

            .asJson()


        getRoleMembers.body.actors.each { roleMember ->

            sb.add("${role.actor}:   ${roleMember.displayName}")

        }

    }

}

return sb

I have also

Accepted answers

Sean Chua _Adaptavist_

Hey @Whitni Smith ,

Since you are ok with:

NOTE: I am OK if output is by project and I have to scrub the data and sort it to merge all the results for a user (example: user Jacob McCarthy is in project A as developer, user Jacob McCarthy is in project B as administrator, user Jacob McCarthy is in project F as collaborator)

You can try giving this a try. I used my Script Console to run it as (ScriptRunner for Jira Add-on User) and it gave me a text dump in the logs for the projects and the system admins/apps/users/etc.. It does take awhile to run..maybe test it in a test site first or something..

<span>// Fetch the projects</span>
<span>def</span> <span>fetchAllProjects</span><span>(</span><span>)</span> <span>{</span>
    <span>def</span><span> projectsResponse </span><span>=</span> <span>get</span><span>(</span><span>'/rest/api/3/project/search'</span><span>)</span>
        <span>.</span><span>header</span><span>(</span><span>"Accept"</span><span>,</span> <span>"application/json"</span><span>)</span>
        <span>.</span><span>asObject</span><span>(</span><span>Map</span><span>)</span>
    <span>return</span><span> projectsResponse</span><span>.</span><span>status </span><span>==</span> <span>200</span> <span>?</span><span> projectsResponse</span><span>.</span><span>body</span><span>.</span><span>values </span><span>:</span> <span>[</span><span>]</span>
<span>}</span>

<span>// Fetch the project roles</span>
<span>def</span> <span>fetchProjectRoles</span><span>(</span><span>String projectIdOrKey</span><span>)</span> <span>{</span>
    <span>def</span><span> rolesResponse </span><span>=</span> <span>get</span><span>(</span><span>"/rest/api/3/project/</span><span>$</span><span>{</span><span>projectIdOrKey</span><span>}</span><span>/role"</span><span>)</span>
        <span>.</span><span>header</span><span>(</span><span>"Accept"</span><span>,</span> <span>"application/json"</span><span>)</span>
        <span>.</span><span>asObject</span><span>(</span><span>Map</span><span>)</span>
    <span>return</span><span> rolesResponse</span><span>.</span><span>status </span><span>==</span> <span>200</span> <span>?</span><span> rolesResponse</span><span>.</span><span>body </span><span>:</span> <span>[</span><span>:</span><span>]</span>
<span>}</span>

<span>// Fetch users for project</span>
<span>def</span> <span>fetchUsersForRole</span><span>(</span><span>String roleUrl</span><span>)</span> <span>{</span>
    <span>def</span><span> usersResponse </span><span>=</span> <span>get</span><span>(</span><span>roleUrl</span><span>)</span>
        <span>.</span><span>header</span><span>(</span><span>"Accept"</span><span>,</span> <span>"application/json"</span><span>)</span>
        <span>.</span><span>asObject</span><span>(</span><span>Map</span><span>)</span>
    <span>return</span><span> usersResponse</span><span>.</span><span>status </span><span>==</span> <span>200</span> <span>?</span><span> usersResponse</span><span>.</span><span>body</span><span>.</span><span>actors </span><span>:</span> <span>[</span><span>]</span>
<span>}</span>

<span>// Display in the logs</span>
<span>def</span><span> projects </span><span>=</span> <span>fetchAllProjects</span><span>(</span><span>)</span>
<span>projects</span><span>.</span><span>each </span><span>{</span><span> project </span><span>-></span>
<span>    logger</span><span>.</span><span>info</span><span>(</span><span>"Processing project: </span><span>$</span><span>{</span><span>project</span><span>.</span><span>name</span><span>}</span><span> (</span><span>$</span><span>{</span><span>project</span><span>.</span><span>key</span><span>}</span><span>)"</span><span>)</span>
    
    <span>def</span><span> projectRoles </span><span>=</span> <span>fetchProjectRoles</span><span>(</span><span>project</span><span>.</span><span>id</span><span>)</span>
<span>    projectRoles</span><span>.</span><span>each </span><span>{</span><span> roleName</span><span>,</span><span> roleUrl </span><span>-></span>
<span>        logger</span><span>.</span><span>info</span><span>(</span><span>"Fetching users for role: </span><span>$</span><span>{</span><span>roleName</span><span>}</span><span>"</span><span>)</span>
        
        <span>def</span><span> users </span><span>=</span> <span>fetchUsersForRole</span><span>(</span><span>roleUrl</span><span>)</span>
<span>        users</span><span>.</span><span>each </span><span>{</span><span> user </span><span>-></span>
            <span>// Example filter to focus on human users (adjust as needed)</span>
            <span>if</span> <span>(</span><span>!</span><span>user</span><span>.</span><span>displayName</span><span>.</span><span>contains</span><span>(</span><span>"App"</span><span>)</span> <span>&&</span> <span>!</span><span>user</span><span>.</span><span>displayName</span><span>.</span><span>contains</span><span>(</span><span>"System"</span><span>)</span><span>)</span> <span>{</span>
<span>                logger</span><span>.</span><span>info</span><span>(</span><span>"User: </span><span>$</span><span>{</span><span>user</span><span>.</span><span>displayName</span><span>}</span><span> has role: </span><span>$</span><span>{</span><span>roleName</span><span>}</span><span> in project: </span><span>$</span><span>{</span><span>project</span><span>.</span><span>name</span><span>}</span><span> (</span><span>$</span><span>{</span><span>project</span><span>.</span><span>key</span><span>}</span><span>)"</span><span>)</span>
            <span>}</span>
        <span>}</span>
    <span>}</span>
<span>}</span>

I'm sure you can kinda make it nicer and do it better as I'm not a coding pro..haha.. and since you will also be getting a text diarrhoea.. I think you can add some kind of filtering to remove those system/app stuff by adding like:

<span>def</span> <span>filterOutUsers</span><span>(</span><span>def</span><span> users</span><span>)</span> <span>{</span>
    <span>// remove those with these indicators etc</span>
    <span>def</span><span> systemUserIndicators </span><span>=</span> <span>[</span><span>"App"</span><span>,</span> "JIRA", "Jira", <span>"for Jira"</span><span>,</span> <span>"Automation"</span><span>,</span> <span>"Bot", "System"</span><span>]</span>
    <span>return</span><span> users</span><span>.</span><span>findAll </span><span>{</span><span> user </span><span>-></span>
        <span>!</span><span>systemUserIndicators</span><span>.</span><span>any </span><span>{</span><span> indicator </span><span>-></span><span> user</span><span>.</span><span>displayName</span><span>.</span><span>contains</span><span>(</span><span>indicator</span><span>)</span> <span>}</span>
    <span>}</span>
<span>}</span>

Those are my thoughts..give it a shot, and if that fails too - try opening a Support Ticket with us. Maybe there is a better way or better samples

Regards,
Sean

All comments

Sean Chua _Adaptavist_

Hey @Whitni Smith ,

Since you are ok with:

NOTE: I am OK if output is by project and I have to scrub the data and sort it to merge all the results for a user (example: user Jacob McCarthy is in project A as developer, user Jacob McCarthy is in project B as administrator, user Jacob McCarthy is in project F as collaborator)

<span>// Fetch the projects</span>
<span>def</span> <span>fetchAllProjects</span><span>(</span><span>)</span> <span>{</span>
    <span>def</span><span> projectsResponse </span><span>=</span> <span>get</span><span>(</span><span>'/rest/api/3/project/search'</span><span>)</span>
        <span>.</span><span>header</span><span>(</span><span>"Accept"</span><span>,</span> <span>"application/json"</span><span>)</span>
        <span>.</span><span>asObject</span><span>(</span><span>Map</span><span>)</span>
    <span>return</span><span> projectsResponse</span><span>.</span><span>status </span><span>==</span> <span>200</span> <span>?</span><span> projectsResponse</span><span>.</span><span>body</span><span>.</span><span>values </span><span>:</span> <span>[</span><span>]</span>
<span>}</span>

<span>// Fetch the project roles</span>
<span>def</span> <span>fetchProjectRoles</span><span>(</span><span>String projectIdOrKey</span><span>)</span> <span>{</span>
    <span>def</span><span> rolesResponse </span><span>=</span> <span>get</span><span>(</span><span>"/rest/api/3/project/</span><span>$</span><span>{</span><span>projectIdOrKey</span><span>}</span><span>/role"</span><span>)</span>
        <span>.</span><span>header</span><span>(</span><span>"Accept"</span><span>,</span> <span>"application/json"</span><span>)</span>
        <span>.</span><span>asObject</span><span>(</span><span>Map</span><span>)</span>
    <span>return</span><span> rolesResponse</span><span>.</span><span>status </span><span>==</span> <span>200</span> <span>?</span><span> rolesResponse</span><span>.</span><span>body </span><span>:</span> <span>[</span><span>:</span><span>]</span>
<span>}</span>

<span>// Fetch users for project</span>
<span>def</span> <span>fetchUsersForRole</span><span>(</span><span>String roleUrl</span><span>)</span> <span>{</span>
    <span>def</span><span> usersResponse </span><span>=</span> <span>get</span><span>(</span><span>roleUrl</span><span>)</span>
        <span>.</span><span>header</span><span>(</span><span>"Accept"</span><span>,</span> <span>"application/json"</span><span>)</span>
        <span>.</span><span>asObject</span><span>(</span><span>Map</span><span>)</span>
    <span>return</span><span> usersResponse</span><span>.</span><span>status </span><span>==</span> <span>200</span> <span>?</span><span> usersResponse</span><span>.</span><span>body</span><span>.</span><span>actors </span><span>:</span> <span>[</span><span>]</span>
<span>}</span>

<span>// Display in the logs</span>
<span>def</span><span> projects </span><span>=</span> <span>fetchAllProjects</span><span>(</span><span>)</span>
<span>projects</span><span>.</span><span>each </span><span>{</span><span> project </span><span>-></span>
<span>    logger</span><span>.</span><span>info</span><span>(</span><span>"Processing project: </span><span>$</span><span>{</span><span>project</span><span>.</span><span>name</span><span>}</span><span> (</span><span>$</span><span>{</span><span>project</span><span>.</span><span>key</span><span>}</span><span>)"</span><span>)</span>
    
    <span>def</span><span> projectRoles </span><span>=</span> <span>fetchProjectRoles</span><span>(</span><span>project</span><span>.</span><span>id</span><span>)</span>
<span>    projectRoles</span><span>.</span><span>each </span><span>{</span><span> roleName</span><span>,</span><span> roleUrl </span><span>-></span>
<span>        logger</span><span>.</span><span>info</span><span>(</span><span>"Fetching users for role: </span><span>$</span><span>{</span><span>roleName</span><span>}</span><span>"</span><span>)</span>
        
        <span>def</span><span> users </span><span>=</span> <span>fetchUsersForRole</span><span>(</span><span>roleUrl</span><span>)</span>
<span>        users</span><span>.</span><span>each </span><span>{</span><span> user </span><span>-></span>
            <span>// Example filter to focus on human users (adjust as needed)</span>
            <span>if</span> <span>(</span><span>!</span><span>user</span><span>.</span><span>displayName</span><span>.</span><span>contains</span><span>(</span><span>"App"</span><span>)</span> <span>&&</span> <span>!</span><span>user</span><span>.</span><span>displayName</span><span>.</span><span>contains</span><span>(</span><span>"System"</span><span>)</span><span>)</span> <span>{</span>
<span>                logger</span><span>.</span><span>info</span><span>(</span><span>"User: </span><span>$</span><span>{</span><span>user</span><span>.</span><span>displayName</span><span>}</span><span> has role: </span><span>$</span><span>{</span><span>roleName</span><span>}</span><span> in project: </span><span>$</span><span>{</span><span>project</span><span>.</span><span>name</span><span>}</span><span> (</span><span>$</span><span>{</span><span>project</span><span>.</span><span>key</span><span>}</span><span>)"</span><span>)</span>
            <span>}</span>
        <span>}</span>
    <span>}</span>
<span>}</span>

<span>def</span> <span>filterOutUsers</span><span>(</span><span>def</span><span> users</span><span>)</span> <span>{</span>
    <span>// remove those with these indicators etc</span>
    <span>def</span><span> systemUserIndicators </span><span>=</span> <span>[</span><span>"App"</span><span>,</span> "JIRA", "Jira", <span>"for Jira"</span><span>,</span> <span>"Automation"</span><span>,</span> <span>"Bot", "System"</span><span>]</span>
    <span>return</span><span> users</span><span>.</span><span>findAll </span><span>{</span><span> user </span><span>-></span>
        <span>!</span><span>systemUserIndicators</span><span>.</span><span>any </span><span>{</span><span> indicator </span><span>-></span><span> user</span><span>.</span><span>displayName</span><span>.</span><span>contains</span><span>(</span><span>indicator</span><span>)</span> <span>}</span>
    <span>}</span>
<span>}</span>

Those are my thoughts..give it a shot, and if that fails too - try opening a Support Ticket with us. Maybe there is a better way or better samples

Regards,
Sean

Whitni Smith_dtxmgr

@Sean Chua _Adaptavist_ thanks! your initial script worked fine and I just scrubbed the data using OpenRefine. I have a follow up -- I need to filter on the active value (only return users that have an active jira license -- haven't been suspended) with that being said, I adjusted the script as such - and it's not returning any values.

import groovy.json.JsonSlurper

// Fetch the projects
def fetchAllProjects() {
def projectsResponse = get('/rest/api/3/project/search')
.header("Accept", "application/json")
.asObject(Map)
return projectsResponse.status == 200 ? projectsResponse.body.values : []
}

// Fetch the project roles
def fetchProjectRoles(String projectIdOrKey) {
def rolesResponse = get("/rest/api/3/project/${projectIdOrKey}/role")
.header("Accept", "application/json")
.asObject(Map)
return rolesResponse.status == 200 ? rolesResponse.body : [:]
}

// Fetch users for project
def fetchUsersForRole(String roleUrl) {
def usersResponse = get(roleUrl)
.header("Accept", "application/json")
.asObject(Map)
return usersResponse.status == 200 ? usersResponse.body.actors : []
}

// Filter out inactive users
def filterOutInactiveUsers(def users) {
return users.findAll { user ->
user.active
}
}

// Display in the logs
def projects = fetchAllProjects()
projects.each { project ->
logger.info("Processing project: ${project.name} (${project.key})")

def projectRoles = fetchProjectRoles(project.id)
projectRoles.each { roleName, roleUrl ->
logger.info("Fetching users for role: ${roleName}")

def users = fetchUsersForRole(roleUrl)
def activeUsers = filterOutInactiveUsers(users)

activeUsers.each { user ->
// Example filter to focus on human users (adjust as needed)
if (!user.displayName.contains("App") && !user.displayName.contains("System")) {
logger.info("User: ${user.displayName} has role: ${roleName} in project: ${project.name} (${project.key})")
}
}
}
}

Sean Chua _Adaptavist_

hey @Whitni Smith , yeah, for active users specific. I guess it would depend on what you mean by active?

When I used the user.active like you have, it doesn't show as well, so the other way round I went was to "exclude" users which has the indicators in the displayname.

<span>def</span> <span>filterOutUsers</span><span>(</span><span>def</span><span> users</span><span>)</span> <span>{</span>
    <span>// remove those with these indicators etc</span>
    <span>def</span><span> systemUserIndicators </span><span>=</span> <span>[</span><span>"App"</span><span>,</span> "JIRA", "Jira", <span>"for Jira"</span><span>,</span> <span>"Automation"</span><span>,</span> <span>"Bot", "System"</span><span>]</span>
    <span>return</span><span> users</span><span>.</span><span>findAll </span><span>{</span><span> user </span><span>-></span>
        <span>!</span><span>systemUserIndicators</span><span>.</span><span>any </span><span>{</span><span> indicator </span><span>-></span><span> user</span><span>.</span><span>displayName</span><span>.</span><span>contains</span><span>(</span><span>indicator</span><span>)</span> <span>}</span>
    <span>}</span>
<span>}</span>

Maybe it could be possible to use GET /rest/api/3/users , to check against if they are active but that is against if the user is active as a user like "active":true , meaning they are not suspended etc. , my brain fried abit, i just remember that for this one, ScriptRunner for Jira Cloud is a "Connect App", hence "Connect apps cannot access this REST resource." - which is likely why nothing comes up in the search. So cutting this piece out.

But if you want to see whether the user has recently logged in kind of info, then I think that would be entirely different, and I suppose you may need to use Organizations REST API like GET /v1/orgs/{orgId}/directory/users/{accountId}/last-active-dates or something which needs Cloud Admin tokens or something of the sorts..

At least for now, I can't think of the right way to get it.. But will try playing around a little more and see if I can get something going

Regards,
Sean

Petru Simion [Simitech Ltd.]

Recognizing the need to view the roles structure across your organization, our company developed the app CIFJ - Roles Dashboard for Jira https://marketplace.atlassian.com/apps/1235459/cifj-roles-dashboard-for-jira?hosting=cloud&tab=overview

It allows depicting Project - Role - User as well as User - Project - Role relationships across your organisation.

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

scriptrunner

jira

cloud

adaptavist

jira-cloud