Channels
#prefect-community
Title
d
Dan Morris
06/27/2023, 3:28 PMHi, while using Prefect v1 we needed to identify a user's email in-flight for a flow they triggered, the solution required a GraphQL query. I'm now migrating the same flow to Prefect v2 and wanted to check if the way forward is to use the REST API to fetch the user info, or if there is another way to do this? Thank you
n
nicholas
06/27/2023, 3:36 PM
Hi @Dan Morris - take a look at the in-app API docs for info about what endpoints are available. In particular I think the
/api/users/{id}d
Dan Morris
06/27/2023, 3:37 PMAwesome speedy reponse 🙂 I'll take a look, thank you
👍 1
I've hit an issue, not sure if it's by design: If I create a flow run within my personal account I can retrieve the "created_by" element using an API call, the "id" of which relates to me as the creating user and details retrievable using /api/users/{id} as stated. Doing the same in the corporate workspace results in "not found" as the "id" retrieved is actually an account id - can be used with /api/accounts/{id} but cannot be used to identify the individual that created the flow. Am I missing something?
Oh wait...my postman.com wasn't set up correctly, I'll test again and come back...
Ok so ignore the bit about it working as an acocunt_id, the rest of what I said remains true - works on my personal account but not the corporate workspace
I've worked out it has something to do with authentication, if I create an API key under my user then I can see my details, makes sense - but I was hoping a service account API key would be able to see all corporate user info, I'll dig a bit more
Yeah service account with full admin role and all permissions still fails to see my user info :-(
n
nicholas
06/30/2023, 2:51 PM
Hm I don’t remember off the top of my head how that route interacts with permissions for service accounts but it’s possible a more appropriate route for what you’re doing would be
/api/accounts/{account_id}/workspaces/{workspace_id}/user_access/{id}d
Dan Morris
07/04/2023, 12:47 PMThanks for helping with this, but I'm not sure how to implement what you've shared here. Can you guide me to what the {id} value would be please? My testing results in an 404 error "Workspace Actor Access not found" when using the user id
n
nicholas
07/05/2023, 4:15 PM
My apologies, I misunderstood what that route was keying on (it’s not user-id); can you confirm that the service account you’re attempting to use has been invited to the workspace(s) you’re looking to enumerate users for?
d
Dan Morris
07/06/2023, 2:02 PMThis message contains interactive elements.
n
nicholas
07/06/2023, 2:41 PM
@Dan Morris if you visit the workspace sharing screen (accessible from the left side navigation at the bottom if you’re in a workspace), you should be able to see the service accounts that have access to the workspace. You’ll need to manually add the one you’re trying to use
d
Dan Morris
07/06/2023, 3:25 PMOh I see, yeah I hadn't realised that was a separate step - as it turns out though it must be automatic as all the service accounts we've created are already listed with the workspace roles chosen at the time of creation
n
nicholas
07/06/2023, 3:30 PM
Ah ok, it’s possible you have default access configured. This sounds like a bug - as I understand it you’re working with our support team already on this but I’m going to ping them just in case. To make sure I understand correctly, you’re just trying to fetch information about the user that triggered a flow run, right?
(or service account)
d
Dan Morris
07/06/2023, 3:34 PMThat's correct, thank you for patiently going through this 🙂
n
nicholas
07/06/2023, 3:39 PM
No thank you! I’ll have them communicate with you from here since there’s not a ton more I can do at the moment; feel free to reach out if needed!
d
Dan Morris
08/03/2023, 11:48 AMHi, bumping this as not heard anything from support on this at this time
n
nicholas
08/03/2023, 2:10 PM
Hi @Dan Morris I’ve just pinged the team, sorry that happened but someone will reach back out shortly
d
Dan Morris
08/03/2023, 2:46 PMThanks @nicholas - Darren Pinder has been in touch via email
🙌 1