Find User Group Membership

Find relationships between users and groups. The command uses the PV_USER_GROUP_MEMBERSHIP public view to find data. Any filters passed should apply to this public view.

GET https://instance.securid.com/aveksa/command.submit?cmd=findUserGroupMembership

Request

Parameters

command	findUserGroupMembership
format	properties - (Default) Returns the response as key=value pairs. When multiple objects are returned, values are comma-delimited: key=value1,value2,value3. json - Returns the response as JSON. csv - Returns the response as comma-separated values. tsv - Returns the response as tab-separated values. xml - Returns the response as XML.
delimiter	The delimiter to use between values for csv and properties formats
returnColumns	The names of the columns to return. returnColumns may be a CSV list of multiple column names. The parameter may also be listed multiple times (ie returnColumns=col1,col2&returnColumns=col3,col4) Refer to Columns table below.
returnMaxRows	The maximum number of objects to return
distinct	true, false Returns only distinct values, equivalent to the distinct keyword in SQL.
sortByColumns	The results will be sorted based on the columns listed using comma as the delimiter if multiple columns are specified. Refer to Columns table below.
sortDirection	Determines sorting order. asc for ascending, desc for descending. If not specified, the natural order returned by the database is used.
includeHeaderRow	true, false Include column headers when the return format is csv or tsv. (Default) true
ignoreCase	true, false Returns case-insensitive search results for specified filter parameters. (Default) false

Filter Parameters

Any column listed in the Columns table can be passed as a filter parameter to narrow results. Filters are matched against the PV_USER_GROUP_MEMBERSHIP public view.

Query logic

Scenario	Behavior
Two different parameters: group_id=52&member_derived_from_type=Account	AND. Returns Account-type members in group 52 only.
Same parameter repeated: group_id=52&group_id=55	OR within that field. Returns members in group 52 or 55.
Mixed: member_derived_from_type=Account&group_id=52&group_id=55	(member_derived_from_type is Account) AND (group_id is 52 or 55)

OR logic across different parameters is not supported

A single API call cannot return rows where group_id=52 OR member_derived_from_type=Account. OR logic between different filter parameters is not supported.

Workaround: Make separate requests for each filter condition. Merge and deduplicate the results client-side.

Columns

group_id	[Foreign Key referencing the Group] ID of the group the user belongs to
user_id	[Foreign Key referencing USERS.ID] User who is a member of the group
member_derived_from_type	How the membership was derived. Known values: Account, Direct
member_derived_from_id	ID of the source object (e.g. account ID) from which membership was derived

Headers

Authorization	Bearer token
Accept	application/json
Content-Type	application/json

Response

Parameters

The API returns the requested columns specified by returnColumns as output. If returnColumns is unspecified then all columns listed will be returned.

Examples

All columns

Omit returnColumns to return every field for each membership record.

Request

Curl

curl -K -X GET \
"https://instance.securid.com/aveksa/command.submit?cmd=findUserGroupMembership&format=json&returnMaxRows=2" \
-H "Authorization: Bearer <token>"

Python

import requests

url = "https://instance.securid.com/aveksa/command.submit"
params = {
    "cmd": "findUserGroupMembership",
    "format": "json",
    "returnMaxRows": "2"
}
headers = {"Authorization": "Bearer <token>"}

response = requests.get(url, params=params, headers=headers)
print(response.json())

Node.js

const axios = require('axios');

axios.get("https://instance.securid.com/aveksa/command.submit", {
    params: {
        cmd: "findUserGroupMembership",
        format: "json",
        returnMaxRows: "2"
    },
    headers: { Authorization: "Bearer <token>" }
}).then(r => console.log(r.data));

Response

200

{
  "findUserGroupMembership": [
    {
      "group_id": "52",
      "user_id": "46341",
      "member_derived_from_type": "Account",
      "member_derived_from_id": "2281134"
    },
    {
      "group_id": "52",
      "user_id": "46197",
      "member_derived_from_type": "Account",
      "member_derived_from_id": "2281094"
    }
  ]
}

Specific columns

Use returnColumns to limit the response to the fields you need.

Request

Curl

curl -K -X GET \
"https://instance.securid.com/aveksa/command.submit?cmd=findUserGroupMembership&format=json&returnMaxRows=3&returnColumns=group_id,user_id,member_derived_from_type,member_derived_from_id" \
-H "Authorization: Bearer <token>"

Python

import requests

url = "https://instance.securid.com/aveksa/command.submit"
params = {
    "cmd": "findUserGroupMembership",
    "format": "json",
    "returnMaxRows": "3",
    "returnColumns": "group_id,user_id,member_derived_from_type,member_derived_from_id"
}
headers = {"Authorization": "Bearer <token>"}

response = requests.get(url, params=params, headers=headers)
print(response.json())

Node.js

const axios = require('axios');

axios.get("https://instance.securid.com/aveksa/command.submit", {
    params: {
        cmd: "findUserGroupMembership",
        format: "json",
        returnMaxRows: "3",
        returnColumns: "group_id,user_id,member_derived_from_type,member_derived_from_id"
    },
    headers: { Authorization: "Bearer <token>" }
}).then(r => console.log(r.data));

Response

200

{
  "findUserGroupMembership": [
    {
      "group_id": "52",
      "user_id": "46341",
      "member_derived_from_type": "Account",
      "member_derived_from_id": "2281134"
    },
    {
      "group_id": "52",
      "user_id": "46197",
      "member_derived_from_type": "Account",
      "member_derived_from_id": "2281094"
    },
    {
      "group_id": "52",
      "user_id": "46193",
      "member_derived_from_type": "Account",
      "member_derived_from_id": "2281395"
    }
  ]
}

412 Invalid column

<html>
  <head><title>Error</title></head>
  <body>The parameter returncolumns contains an invalid column - `invalid_col`.
 Query String=cmd=findUserGroupMembership&amp;format=json&amp;returnMaxRows=2&amp;returnColumns=group_id,invalid_col</body>
</html>

Filter by a single value

Pass any column name as a query parameter to filter results. The example returns memberships where member_derived_from_type is Account.

Request

Curl

curl -K -X GET \
"https://instance.securid.com/aveksa/command.submit?cmd=findUserGroupMembership&format=json&returnMaxRows=3&returnColumns=group_id,user_id,member_derived_from_type,member_derived_from_id&member_derived_from_type=Account" \
-H "Authorization: Bearer <token>"

Python

import requests

url = "https://instance.securid.com/aveksa/command.submit"
params = {
    "cmd": "findUserGroupMembership",
    "format": "json",
    "returnMaxRows": "3",
    "returnColumns": "group_id,user_id,member_derived_from_type,member_derived_from_id",
    "member_derived_from_type": "Account"
}
headers = {"Authorization": "Bearer <token>"}

response = requests.get(url, params=params, headers=headers)
print(response.json())

Node.js

const axios = require('axios');

axios.get("https://instance.securid.com/aveksa/command.submit", {
    params: {
        cmd: "findUserGroupMembership",
        format: "json",
        returnMaxRows: "3",
        returnColumns: "group_id,user_id,member_derived_from_type,member_derived_from_id",
        member_derived_from_type: "Account"
    },
    headers: { Authorization: "Bearer <token>" }
}).then(r => console.log(r.data));

Response

200

{
  "findUserGroupMembership": [
    {
      "group_id": "52",
      "user_id": "46341",
      "member_derived_from_type": "Account",
      "member_derived_from_id": "2281134"
    },
    {
      "group_id": "52",
      "user_id": "46197",
      "member_derived_from_type": "Account",
      "member_derived_from_id": "2281094"
    },
    {
      "group_id": "52",
      "user_id": "46193",
      "member_derived_from_type": "Account",
      "member_derived_from_id": "2281395"
    }
  ]
}

Filter with OR logic

Repeat the same parameter with different values to match any of them. The example requests memberships where member_derived_from_type is Account or Direct.

Request

Curl

curl -K -X GET \
"https://instance.securid.com/aveksa/command.submit?cmd=findUserGroupMembership&format=json&returnMaxRows=3&returnColumns=group_id,user_id,member_derived_from_type,member_derived_from_id&member_derived_from_type=Account&member_derived_from_type=Direct" \
-H "Authorization: Bearer <token>"

Python

import requests

url = "https://instance.securid.com/aveksa/command.submit"
params = [
    ("cmd", "findUserGroupMembership"),
    ("format", "json"),
    ("returnMaxRows", "3"),
    ("returnColumns", "group_id,user_id,member_derived_from_type,member_derived_from_id"),
    ("member_derived_from_type", "Account"),
    ("member_derived_from_type", "Direct")
]
headers = {"Authorization": "Bearer <token>"}

response = requests.get(url, params=params, headers=headers)
print(response.json())

Node.js

const axios = require('axios');

const params = new URLSearchParams();
params.append('cmd', 'findUserGroupMembership');
params.append('format', 'json');
params.append('returnMaxRows', '3');
params.append('returnColumns', 'group_id,user_id,member_derived_from_type,member_derived_from_id');
params.append('member_derived_from_type', 'Account');
params.append('member_derived_from_type', 'Direct');

axios.get("https://instance.securid.com/aveksa/command.submit", {
    params,
    headers: { Authorization: "Bearer <token>" }
}).then(r => console.log(r.data));

Response

200

{
  "findUserGroupMembership": [
    {
      "group_id": "52",
      "user_id": "46341",
      "member_derived_from_type": "Account",
      "member_derived_from_id": "2281134"
    },
    {
      "group_id": "52",
      "user_id": "46197",
      "member_derived_from_type": "Account",
      "member_derived_from_id": "2281094"
    },
    {
      "group_id": "52",
      "user_id": "46193",
      "member_derived_from_type": "Account",
      "member_derived_from_id": "2281395"
    }
  ]
}

Case-insensitive filter

Filters are case-sensitive by default. Set ignoreCase=true to match regardless of case. The example passes member_derived_from_type=account in lowercase and still returns records with the stored value Account.

Request

Curl

curl -K -X GET \
"https://instance.securid.com/aveksa/command.submit?cmd=findUserGroupMembership&format=json&returnMaxRows=3&returnColumns=group_id,user_id,member_derived_from_type&member_derived_from_type=account&ignoreCase=true" \
-H "Authorization: Bearer <token>"

Python

import requests

url = "https://instance.securid.com/aveksa/command.submit"
params = {
    "cmd": "findUserGroupMembership",
    "format": "json",
    "returnMaxRows": "3",
    "returnColumns": "group_id,user_id,member_derived_from_type",
    "member_derived_from_type": "account",
    "ignoreCase": "true"
}
headers = {"Authorization": "Bearer <token>"}

response = requests.get(url, params=params, headers=headers)
print(response.json())

Node.js

const axios = require('axios');

axios.get("https://instance.securid.com/aveksa/command.submit", {
    params: {
        cmd: "findUserGroupMembership",
        format: "json",
        returnMaxRows: "3",
        returnColumns: "group_id,user_id,member_derived_from_type",
        member_derived_from_type: "account",
        ignoreCase: "true"
    },
    headers: { Authorization: "Bearer <token>" }
}).then(r => console.log(r.data));

Response

200

{
  "findUserGroupMembership": [
    {
      "group_id": "52",
      "user_id": "46341",
      "member_derived_from_type": "Account"
    },
    {
      "group_id": "52",
      "user_id": "46197",
      "member_derived_from_type": "Account"
    },
    {
      "group_id": "52",
      "user_id": "46193",
      "member_derived_from_type": "Account"
    }
  ]
}

Sort ascending

Use sortByColumns with a column name and sortDirection=asc to sort results from lowest to highest. The example sorts by group_id.

Request

Curl

curl -K -X GET \
"https://instance.securid.com/aveksa/command.submit?cmd=findUserGroupMembership&format=json&returnMaxRows=3&returnColumns=group_id,user_id,member_derived_from_type&sortByColumns=group_id&sortDirection=asc" \
-H "Authorization: Bearer <token>"

Python

import requests

url = "https://instance.securid.com/aveksa/command.submit"
params = {
    "cmd": "findUserGroupMembership",
    "format": "json",
    "returnMaxRows": "3",
    "returnColumns": "group_id,user_id,member_derived_from_type",
    "sortByColumns": "group_id",
    "sortDirection": "asc"
}
headers = {"Authorization": "Bearer <token>"}

response = requests.get(url, params=params, headers=headers)
print(response.json())

Node.js

const axios = require('axios');

axios.get("https://instance.securid.com/aveksa/command.submit", {
    params: {
        cmd: "findUserGroupMembership",
        format: "json",
        returnMaxRows: "3",
        returnColumns: "group_id,user_id,member_derived_from_type",
        sortByColumns: "group_id",
        sortDirection: "asc"
    },
    headers: { Authorization: "Bearer <token>" }
}).then(r => console.log(r.data));

Response

200

{
  "findUserGroupMembership": [
    {
      "group_id": "52",
      "user_id": "3",
      "member_derived_from_type": "Account"
    },
    {
      "group_id": "52",
      "user_id": "4",
      "member_derived_from_type": "Account"
    },
    {
      "group_id": "52",
      "user_id": "7",
      "member_derived_from_type": "Account"
    }
  ]
}

Sort descending

Set sortDirection=desc to reverse the order.

Request

Curl

curl -K -X GET \
"https://instance.securid.com/aveksa/command.submit?cmd=findUserGroupMembership&format=json&returnMaxRows=3&returnColumns=group_id,user_id,member_derived_from_type&sortByColumns=group_id&sortDirection=desc" \
-H "Authorization: Bearer <token>"

Python

import requests

url = "https://instance.securid.com/aveksa/command.submit"
params = {
    "cmd": "findUserGroupMembership",
    "format": "json",
    "returnMaxRows": "3",
    "returnColumns": "group_id,user_id,member_derived_from_type",
    "sortByColumns": "group_id",
    "sortDirection": "desc"
}
headers = {"Authorization": "Bearer <token>"}

response = requests.get(url, params=params, headers=headers)
print(response.json())

Node.js

const axios = require('axios');

axios.get("https://instance.securid.com/aveksa/command.submit", {
    params: {
        cmd: "findUserGroupMembership",
        format: "json",
        returnMaxRows: "3",
        returnColumns: "group_id,user_id,member_derived_from_type",
        sortByColumns: "group_id",
        sortDirection: "desc"
    },
    headers: { Authorization: "Bearer <token>" }
}).then(r => console.log(r.data));

Response

200

{
  "findUserGroupMembership": [
    {
      "group_id": "44601",
      "user_id": "38328",
      "member_derived_from_type": "Account"
    },
    {
      "group_id": "44502",
      "user_id": "36291",
      "member_derived_from_type": "Account"
    },
    {
      "group_id": "44320",
      "user_id": "38328",
      "member_derived_from_type": "Account"
    }
  ]
}

CSV with custom delimiter

Set format=csv for a comma-separated response. Use delimiter to change the separator character.

Request

Curl

curl -K -X GET \
"https://instance.securid.com/aveksa/command.submit?cmd=findUserGroupMembership&format=csv&returnMaxRows=3&returnColumns=group_id,user_id,member_derived_from_type&delimiter=~" \
-H "Authorization: Bearer <token>"

Python

import requests

url = "https://instance.securid.com/aveksa/command.submit"
params = {
    "cmd": "findUserGroupMembership",
    "format": "csv",
    "returnMaxRows": "3",
    "returnColumns": "group_id,user_id,member_derived_from_type",
    "delimiter": "~"
}
headers = {"Authorization": "Bearer <token>"}

response = requests.get(url, params=params, headers=headers)
print(response.text)

Node.js

const axios = require('axios');

axios.get("https://instance.securid.com/aveksa/command.submit", {
    params: {
        cmd: "findUserGroupMembership",
        format: "csv",
        returnMaxRows: "3",
        returnColumns: "group_id,user_id,member_derived_from_type",
        delimiter: "~"
    },
    headers: { Authorization: "Bearer <token>" }
}).then(r => console.log(r.data));

Response

200

group_id~user_id~member_derived_from_type
52~46341~Account
52~46197~Account
52~46193~Account

CSV without header row

Set includeHeaderRow=false when your downstream system expects raw data rows without a header.

Request

Curl

curl -K -X GET \
"https://instance.securid.com/aveksa/command.submit?cmd=findUserGroupMembership&format=csv&returnMaxRows=3&returnColumns=group_id,user_id,member_derived_from_type&includeHeaderRow=false" \
-H "Authorization: Bearer <token>"

Python

import requests

url = "https://instance.securid.com/aveksa/command.submit"
params = {
    "cmd": "findUserGroupMembership",
    "format": "csv",
    "returnMaxRows": "3",
    "returnColumns": "group_id,user_id,member_derived_from_type",
    "includeHeaderRow": "false"
}
headers = {"Authorization": "Bearer <token>"}

response = requests.get(url, params=params, headers=headers)
print(response.text)

Node.js

const axios = require('axios');

axios.get("https://instance.securid.com/aveksa/command.submit", {
    params: {
        cmd: "findUserGroupMembership",
        format: "csv",
        returnMaxRows: "3",
        returnColumns: "group_id,user_id,member_derived_from_type",
        includeHeaderRow: "false"
    },
    headers: { Authorization: "Bearer <token>" }
}).then(r => console.log(r.data));

Response

200

52,46341,Account
52,46197,Account
52,46193,Account

Error responses

A 401 is returned when the token is missing, invalid, or expired. A 412 is returned when returnColumns includes a column name that does not exist in the PV_USER_GROUP_MEMBERSHIP public view.

401 Invalid token

<html>
  <head><title>Error</title></head>
  <body>The token is not valid for the command 'findUserGroupMembership'. Token is invalid or expired</body>
</html>

412 Invalid column

<html>
  <head><title>Error</title></head>
  <body>The parameter returncolumns contains an invalid column - `invalid_col`.
 Query String=cmd=findUserGroupMembership&amp;format=json&amp;returnMaxRows=2&amp;returnColumns=group_id,invalid_col</body>
</html>

Verified with RSA Governance & Lifecycle version 8.0.0.188886 P10_HF01.