In the orchestrator GET All Users API response, I can see different “type” of users - DirectoryRobot, DirectoryGroup, User, DirectoryUser, etc.
Observations -
- The user with type “DirectoryUser” in API response is marked as “Local User” in the Orchestrator UI.
- The user with type “User” in API response is marked as “Directory User” in the UI.
- All the registered “Org Admin” users are also part of the Orchestrator’s GET All Users API response even though those are not visible in the Orchestrator’s Manage Access → Users tab. Whereas, unregistered Org Admin users are not present in the API response.
Q1: Please confirm if this is expected behaviour.
Q2: How to distinguish between the “Orchestrator” users (users assigned/created at Orchestrator level) and “Platform” users (User Accounts) from the API response?
Currently, I didn’t find any reliable attribute that can be used for this.
Can “AuthenticationSource” attribute be used for this differentiation?