API for returning user/admin info - Mailgun UI
Would love an API for returning information about the management users for the Mailgun account.
I'd like to be able to query to get a list of "what employees have mailgun accounts? what role (admin etc) they are assigned to? is 2FA is configured?"
Would like to have the capability to get those details programmatically from Mailgun on a recurring basis.
Having this via the API would be extremely beneficial.
Hi all,
Thanks so much for your feedback here. We've recently released the ability for Admin users to programmatically retrieve a list of user accounts via a Users API endpoint. Additionally, Admin users can make a GET call to return specific details for a user on the account. Finally, all users can now retrieve their own user account details. For more information on public API endpoints and access levels per role, please visit https://documentation.mailgun.com/docs/mailgun/user-manual/mg_security/#rbac-api-key-permissions-based-on-role.
-
Nachi Raman commented
Compliance automation platforms need to run periodic checks on users accessing an organization's SaaS apps. They need to verify 1. that the user should indeed have access to a certain platform 2. and that they don't have more permissions than necessary.
In order to run these automated checks, they need to be able to fetch the users via an API. Mailgun currently doesn't support this. This needs to be added urgently in order to ensure there are no lapses security and compliance wise at any point.
-
Nachi Raman commented
Compliance automation platforms need to be able to fetch the list of users on Mailgun via an API to run automated checks on all the users and ensure that 1. they indeed need to have access to Mailgun and 2. they have the right permissions. Allowing for this to be fetched via an API will help run these checks seamlessly.
-
Jeremy Pockey commented
Currently it is only possible to view the users on an account within our control panel. Having a way to retrieve and/or export this information via API would be helpful for customers who do not wish to use our control panel