Any plans to be able to better administrate teams?

Google Cloud Apigee
, ,
1

Hi, we’ve been making extensive use of the teams functionality in the Integrated Developer Portal…

As it’s not always easy to see who has requested access to an API based on a team identifier (we just see something like Developer Team (aa30f095-a64c-41cf-be13-dddd2496234b@devteam.apigee.io) and then have to go hunting through the dev portal to find a match), I have made use of some undocumented APIs to pull this information together on a dashboard and improve our workflow…

Please forgive the use of undocumented APIs as follows:

GET apigee.googleapis/com/v1/organizations/{organization}/sites - gives a load of information about the integrated portals deployed including the id of the site to be queried…

GET apigee.googleapis/com/v1/organizations/{organization}/sites/{id}/portal - gives further information about the portal including the zoneID…

GET apigee.googleapis/com/v1/organizations/{organization}/providers/{zoneID}/teams - then provides further information about the teams within that portal and we can use the information (with some jigging through the /developers endpoint) to make a match with the afore mentioned Developer Team above.

My specific question is this. There are a load of junk teams that have been created, in particular, many that have been created by security testers who have since deleted the test account used to create those teams. I have tried deleting the corresponding developer accounts but that doesn’t seem to work. Are there any options for me to delete these teams? Or better, are there any plans to improve the administrative management of teams within Apigee (such as being able to edit members/rename)?

It would be good to get a perspective of where this might sit within any future plans. (Although judging by the amount of effort put forth in other areas of Apigee development, I suspect this may not be high on the priority list?)

2

@byz you may be interested to respond.

3

By examining the chrome devtools, one can see the API required for deleting a team.

Take care - it is possible to delete a team with existing members and apps!

:teamId = 3049b903-c493-4790-b7ed-6b95ca734fc1

DELETE :apigeeio/consumers/api/teams/:teamId
Cookie: :cookie
accept-language: en-US,en;q=0.9
apigee-portal-csrf: :csrf
Accept: application/json, text/plain, /

In the above apigeeio should be https://ORGNAME-PORTALNAME.apigee.io

BUT, in order to delete the team, I believe you need to be a “team owner”. I don’t know if there is a way to “adopt” a team for which there is no owner, or , for which the owning devportal account has been deleted. You might have to “recreate” the account in the devportal .

4

There are plans to improve the administration of Teams (and other Portals) concepts in the future, but the timeline remains unclear. In the interim, there are unsupported but available workarounds such as what @dchiesa1 shared below.

5

@MasonJohnDavis

After further research, I did not find any way to invoke an API, even an undocumented API, to become team owner.

But I did learn that you can contact Apigee support to request to add a new admin to any existing developer team. This would allow you to “adopt” the orphaned teams in your portal, and either delete them, or start managing them, or whatever you like. When you contact Apigee support, you can direct them to use this internal reference as a template: b/277920836 .

1 Like