Select to view content in your preferred language

Is it possible to expose the admin username that created an AGOL user?

426
1
Jump to solution
01-21-2024 10:06 PM
Labels (1)
JenniferSmits
New Contributor III

Is it possible to expose the admin username that created an AGOL user? We have a large organisation with many local administrators that can create accounts. We struggle to keep track of management of these users. Date Created is a field available in the API and reports. I was wondering if "created by user" was a thing for User Management? Moving forward we will implement better governance tools for tracking user admin association, but would be nice to do an audit.

0 Kudos
1 Solution

Accepted Solutions
ChristopherCounsell
MVP Regular Contributor

You can create an Activity Report 

https://doc.arcgis.com/en/arcgis-online/administer/view-status.htm

What you look for may depend on how the users were created (account created or invited to join with own account). For invited with an account you create, you'll be looking for two entries:

  • request = /sharing/rest/portals/self/invite, idType = inv, action = create
  • request = /sharing/rest/community/users/username/update, idType = user, action = update

This is creating the invite plus the user account action. Could also look activities by user. Some ways you might be able to generate it

https://community.esri.com/t5/arcgis-online-blog/find-out-what-a-user-has-been-doing-in-your/ba-p/89...

There's probably a more systematic way of looking at this but if it involves effort I think that would be better directed towards reducing the number of administrators to avoid this issue in the future. Browsing the activity logs and focusing on requests to update users, should help identify the main admins inviting everyone.

View solution in original post

1 Reply
ChristopherCounsell
MVP Regular Contributor

You can create an Activity Report 

https://doc.arcgis.com/en/arcgis-online/administer/view-status.htm

What you look for may depend on how the users were created (account created or invited to join with own account). For invited with an account you create, you'll be looking for two entries:

  • request = /sharing/rest/portals/self/invite, idType = inv, action = create
  • request = /sharing/rest/community/users/username/update, idType = user, action = update

This is creating the invite plus the user account action. Could also look activities by user. Some ways you might be able to generate it

https://community.esri.com/t5/arcgis-online-blog/find-out-what-a-user-has-been-doing-in-your/ba-p/89...

There's probably a more systematic way of looking at this but if it involves effort I think that would be better directed towards reducing the number of administrators to avoid this issue in the future. Browsing the activity logs and focusing on requests to update users, should help identify the main admins inviting everyone.