Cloud Services

ModernOps configuration

APIs to notify applications of user management changes
Published On May 16, 2024 - 1:22 PM

APIs to notify applications of user management changes

Understand the APIs needed to notify applications of user management changes.
In the Legacy User Management approach, when a user is created or during team-role mapping, the system notifies the applications. Following are the events for which applications are notified:
  • Add user to team or add team to user
  • Remove user from team or team from user
  • Add role to team
  • Remove role from team
  • Change context information for any team-role mapping
  • Create, update, or delete a user
  • Create, update, or delete an organization
This will work only if the authorization is set to be Internal. If the authorization is set to be external/hybrid, then the application team must negotiate with the owners of the external/hybrid authorization system to pass this information to the applications.
To access the Developer Console, follow these steps:
  1. Click the
    user profile icon
     in the upper-right side of the Kyndryl Modern Operations Applications portal.
  2. Select
    Developer Console
    .
This API is to enable or disable showing the source IP address in the audit logs.
  • POST: The first API call enables (true) capturing.
  • PUT: The second API call disables (false) capturing.
  • GET: The third API call captures the flag status.
  • Sample: The last item is an example of an audit message.

Configuration value query parameters

Name
Required
Description
Type
true
yes
Enables source IP address capture in audit logs
string
false
yes
Disables source IP address capture in audit logs
string

Enable source IP address capture in audit logs

Following is the POST call for adding a flag:
Method: POST
url: /core/configuration/v1/configvalues
Body:{
  "configurationkey": "audit_logs_user_ip",
  "configurationvalue": true/false
}

Disable source IP address capture in audit logs

If the flag is already present, use the following PUT call to update the flag:
Method: PUT
url: /core/configuration/v1/configvalues
Body:{
  "configurationkey": "audit_logs_user_ip",
  "configurationvalue": true/false
}

Determine current flag value

To determine the current flag value, use the following API call:
Method: GET
url: /core/configuration/v1/configvalues/audit_logs_user_ip

Sample audit message

{
    "_id" : ObjectId("5e589ef723b5fc826e27e2b6"),
    "logDate" : NumberLong(1582866166731),
    "messageContent" : {
        "messageType" : "HTTP_REQUEST_GET",
        "message" : "c04f9095-ef05-4e6e-a4f6-f3eb3354609a:e2V4dH06-Qf89Rl5E0GiGOWrydSTsItQibonk1qxWdCjExPks8HbmlLner0uH5ep9qElOdfrLS1fSVZLLS0xyKA4CccGpJwpIiwE4YrF",
        "initiatedUTCDate" : "2020-02-28T05:02:46Z",
        "resourceId" : "default",
        "resourceName" : "NA",
        "component" : "API Gateway",
        "outcome" : "UNKNOWN",
        "sourceIpAddress" : [
            "172.17.0.1"
        ],
        "actorUid" : "System",
        "actorTeam" : [
            "N/A"
        ],
        "actorOrg" : [
            "org_all"
        ],
        "ownedByOrg" : [
            "NA"
        ],
        "ownedByTeam" : [
            "NA"
        ],
        "data" : "HTTP Verb:GET, API: /login",
        "initiatedDate" : NumberLong(1582866166000),
        "teamId" : [
            "N/A"
        ],
        "userId" : "System",
        "teamList" : [
            "N/A"
        ],
        "initiatedDateUTC" : ISODate("2020-02-28T05:02:46.000Z")
        "messageIsEncrypted" : true,
        "version" : "v3"
    }
}
Do you have two minutes for a quick survey?
Take Survey