Links

Referencing Users and Groups

Overview

Abbey has the ability to reference users and group members stored externally for use in Grant Kits.
These are most commonly used in two places:
  • Building a Workflow (I'd like Bob to approve, or members of this group to approve)
  • Creating an Output (assign the requester a permission)
For understanding how these data can be used in Access Policies, please see Policy Examples.

User References

An Output block is templatized code change that assigns a user to a particular permission. In order to do that, we need to reference the identifier for a user.
Below shows how an example for AWS Identity Center.
member_id = "{{ user.aws_identitystore.id }}"

Group References

Abbey has the ability to use Group Memberships in the context of a workflow.
For example, the below references a set of Users in a Google Workspace group. Abbey will send an approval to all members of that group, with only one (due to one_of) needing to approve for a user to get access.
one_of = ["{{ groups.googleworkspace.03oy7u2934pbgyw }}"]