I am making a bot which syncs our SSO group information into Discourse when that information changes in our directory service. There is a granular API scope for user operations, but there doesn’t seem to be one for groups. Am I just overlooking it?

If I understand correctly you want an API scope for adding and removing users to groups. There is one for adding users and removing users.

I do not see an API endpoint to do that in the docs.

The docs do not really cover the API scopes. You can find them when you create a new API key on your site, and choose Scope: Granular.

Are you looking for something like “manage groups” (optional group id)? This scope would allow you to add and remove users from a group

Yeah, exactly. Basically, checkboxes corresponding to the API endpoints documented at https://docs.discourse.org/#tag/Groups [image] roughly analogous to [image] The thing you said — add and remove group members — is probably the most important. (I can possibly see some value in separating those, but I don’t think I care for our purposes.) That presumably would also include “List group members” for groups that might not be public. The next-most important thing is Create / Delete / Update — I think for our initial use, though, we’ll rely on manually created groups (and ignore SSO groups which don’t have a Discourse equivalent). Thank you!

Yeah… feels like we are describing 2 scopes here: Manage groups (optional group id) - allows you to add / remove / set group owners / list Administer groups - allows you to create/delete and manage groups. We can certainly get this done some time in the next month, it is not too huge. Adding an internal tag to track it. Sounds good?

The API scopes have been added for managing and administering groups: [image] I believe I already followed up elsewhere, but just closing the loop on this topic.

Is there an API scope which covers operations relating to groups?

Development

mattdm (Matthew Miller) December 23, 2022, 1:49am 3

Sorry, let expand. I know about those API endpoints. What I want is to generate an API key that had the permissions to do those things (and nothing else).

Topic		Replies	Views
Get API Key only for adding/removing users from a group Development rest-api	1	541	September 23, 2022
Granular API support for creating users? Product Support rest-api	1	117	September 17, 2025
Add new groups via sso SSO groups	2	915	November 19, 2019
Use scoped API Keys Integrations rest-api , how-to	6	3070	September 26, 2020
Automatically Adding New Users (from WP integration) To A Group WordPress	8	1943	July 7, 2020

Is there an API scope which covers operations relating to groups?

Related topics