Skip to content

enterprise-team membership user/role ops#206

Open
mtyagi-ks wants to merge 2 commits into
enterprise-team-user-role-operationsfrom
enterprise-team-user-role-operations-int
Open

enterprise-team membership user/role ops#206
mtyagi-ks wants to merge 2 commits into
enterprise-team-user-role-operationsfrom
enterprise-team-user-role-operations-int

Conversation

@mtyagi-ks

@mtyagi-ks mtyagi-ks commented Jul 2, 2026

Copy link
Copy Markdown
Contributor

Summary

Improves enterprise-team membership user and role add/remove operations to match Commander behavior and fixes related SDK batch handling.

  • Add -hsf/--hide-shared-folders support when adding users to a team
  • Honor TeamUserEdit.user_type in batch processing (was always hardcoded to 0)
  • Support team_enterprise_user_update when updating hide-shared-folders for existing team members
  • Block assigning teams to admin roles (roles with managed nodes)
  • Fix multi-team membership bug where user/role lists were mutated across teams in a loop
  • Add validation requiring at least one of -au, -ru, -ar, or -rr
  • Fix incorrect help text for -ar / -rr role flags
  • Align user_type mapping with Commander (on → 2, off → 1) in enterprise-user and enterprise_user_management
  • Add shared helpers: team_user_type_from_hsf_flag(), team_user_type_from_hide_shared_folders(), RoleUtils.is_admin_role()

Test plan

  • enterprise-down then enterprise-team add "Developers"
  • enterprise-team membership "Developers" -au <email> — user appears in enterprise-team view
  • enterprise-team membership "Developers" -ar "PAM Workflow Admin" — role linked to team
  • enterprise-team membership "Developers" -ru <email> — user removed
  • enterprise-team membership "Developers" -rr "PAM Workflow Admin" — role removed
  • enterprise-team membership "Developers" -ru @all / -rr @all — bulk remove works
  • enterprise-team membership "Developers" -ar "Keeper Administrator" — warning, no assignment
  • enterprise-team membership "Developers" -au <email> -hsf on — hide-shared-folders applied
  • Re-add same user with -hsf off on existing member — updates via team_enterprise_user_update
  • enterprise-team membership "Developers" with no flags — clear error message

parser.add_argument('-ru', '--remove-user', action='append', help='remove user from team. @all')
parser.add_argument('-ar', '--add-role', action='append', help='add user to team')
parser.add_argument('-rr', '--remove-role', action='append', help='remove user from team, @all')
parser.add_argument('-ar', '--add-role', action='append', help='add role to team')

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

these changes shoud be supported in team add and edit commands, replicate these supports in team add and team edit subcommands

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

addressed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants