Adding Users to Projects via API

[mbrasile-MHC]

Is there any plan to add an API to add members to a project directly? or am I grossly overthinking how to add members to a project perhaps?

For example:

If you have a project and want to add a user to it, it looks like you currently have to call createProject or updateProject and provide a project dict containing a lot of project data, and then a members dict with an object for each member (also containing a lot of data) that also contains a roles dict within that object.

For automating, it would be kind of nice if we could say here is a project (uuid) and I want to add (first.last@domain.com) or (first.last) or (username) to the project.

[MWedl]

Hi, there is currently no API endpoint to create a user and directly add it to a project. You need to combine multiple API requests:

1. create user: POST /api/v1/pentestusers/
2. fetch existing project members: GET /api/v1/pentestprojects/id/
3. update members: PATCH /api/v1/pentestprojects/id/ with only the members fields set in the request containing a list of existing members and the new member. You can omit project data and user roles. The essential field in members list items is the user ID.

For details see https://demo.sysre.pt/api/public/utils/swagger-ui/

[mbrasile-MHC]

Thanks @MWedl, that's just the push I needed!

For anyone curious in the future, if you pass your users UUID to /api/v1/pentestprojects/[id] you can retrieve a list of all user IDs and email addresses in your 'tenant'. Within our application we just cache this every 24 hours and then do a quick lookup of the email address to retrieve the users sysreptor ID for adding members to projects.