Orchestrator UI vs API discrepancies

In the orchestrator GET All Users API response, I can see different “type” of users - DirectoryRobot, DirectoryGroup, User, DirectoryUser, etc.

Observations -

  1. The user with type “DirectoryUser” in API response is marked as “Local User” in the Orchestrator UI.
  2. The user with type “User” in API response is marked as “Directory User” in the UI.
  3. All the registered “Org Admin” users are also part of the Orchestrator’s GET All Users API response even though those are not visible in the Orchestrator’s Manage Access → Users tab. Whereas, unregistered Org Admin users are not present in the API response.

Q1: Please confirm if this is expected behaviour.

Q2: How to distinguish between the “Orchestrator” users (users assigned/created at Orchestrator level) and “Platform” users (User Accounts) from the API response?
Currently, I didn’t find any reliable attribute that can be used for this.
Can “AuthenticationSource” attribute be used for this differentiation?

@loginerror , your inputs on this please!

1 Like