List of user permissions

[Jaffa]

In the admin page, we can view what workspaces a user has access to as well as any bases the user has created.

Currently however we cannot view bases or apps that the user has been granted access to. We manually have to look at each base/app for the user when pulling a report.

It does look like there is a API function that will pull a report for the list of bases per user, though it would be nice if this information could be viewed in the admin page similar to how Airtable does. I have not been able to find a similar function for app access.

As an admin for a business wide system occasionally i have to run reports on what a user can access and yesterday when asked to do such was when I found these limitations.

Are there any workarounds or planned features to address this? Our current solution would be to keep a manual list of who can access what, but from previous use cases, this does not remain accurate for long

[abaer]

Seems like we are going into a similar direction with our suggestions, @Jaffa

Confirmation: System-wide API endpoint to figure out App users?

Hi, we need to stablish a closer look on base and app ownership in order to implement compliance mechanisms like account and base lifecycle management. For bases, this is not a problem. For almost every base endpoint, there is an equivalent System Admin endpoint. However, I’m missing the same on the system level for endpoints like https://{server}/api/v2.1/universal-apps/{app_token}/app-users/ Is it true that the API does not give an admin access to all apps and their users? Regards, Arndt …

[sha]

This sounds like a reasonable addition to account.seatable.com.

@Jaffa

It does look like there is a API function that will pull a report for the list of bases per user, though it would be nice if this information could be viewed in the admin page similar to how Airtable does.

Are you referring to this endpoint? List My Shares

Unfortunately, this is only accessible to the user itself and there’s currently no mechanism for a team administrator to impersonate a team member through the API.

[Jaffa]

I was looking at this one - List Shares

[sha]

We’re already using that endpoint to generate the contents of the “Shares” page (account.seatable.com/shares).

Is this what you’re looking for? Or does it need to be per-user?

[Jaffa]

Essentially I need to be able to run a report per user, that shows me what Groups, Bases, and Apps they can access.

In Airtable if i clicked on a user in the Admin panel I could see that breakdown as below:

It also allowed me to control the access from that view, adding or removing as needed.

In SeaTable this is fine for Groups but adding specific Bases has to be done at the Base itself, as it is with App.

Adding and removing is something we would like but is a lower priority. Being able to view who can access what is much more important to us for data protection

[TimTom420]

Yes, exactly — a per-user overview would be very useful.

For administration and data protection, it is important to be able to click on a user and see all Groups, Bases, and Apps they can access in one place.

Editing permissions from that view would be nice, but even a read-only report/export would already solve the main problem for audits and access reviews.

[sha]

account.seatable.com now displays bases shared to a user on the user page:

Displaying the list of accessible apps requires changes to SeaTable’s API and will therefore only be possible with the next release of SeaTable. I have created a ticket in our internal issue tracker for this feature. The restriction related to invite links will also be lifted.

[Jaffa]

This is a good step forward! Thanks for this!

Could we also have it exportable to a CSV?