AlexJ_Proc - Hi there! I'm currently working on...
Hi there! I'm currently working on embedding Thoughtspot into my companies application. We're logging in users using JIT using the custom token endpoint. The problem I'm running into is we need to update the users groups depending on what permissions have changed within our system. Based on the docs it looks like JIT does not update a users groups once they have been created. Is there a way to update a users groups through the API using a secret key versus logging in a service account and having the service account make the changes?
2 Replies
cc @Sandeep
Hi @AlexJ_Proc : Currently, the custom token API supports true JIT provisioning, assigning group memberships and roles only at the time of user creation. It cannot be used to update group memberships for existing users; the user update API should be used for that.
Although the RBAC support for assigning or unassigning users to groups via the custom token API is in the future roadmap of the product and will be available in later releases.
cc: @Nicolas @Himanshu Arora