Automating User and Role Management with W&B SCIM API
We're thrilled to announce the W&B SCIM API. Here's what you need to know
Created on February 29|Last edited on March 20
Comment
Onboarding relevant users from across disparate business teams and assigning required roles to them are important parts of a developer platform administrator’s job. Simplifying those tasks can have an indirect multiplier effect on productivity of the developer teams. That’s why we’re excited to announce the launch of W&B SCIM API, which allows users to automate role and user management operations within a W&B organization and its underlying teams.
Until now, organization admins in a Weights & Biases organization were able to onboard users either by using the invite user flow, or by using Single Sign-On (SSO)-based auto-provisioning in W&B server instances. And the only way to assign organization-scoped roles to those users was by using the subscription UI in Public Cloud or from the organization dashboard in Dedicated Cloud or Self-managed Server instances. Similarly, team admins previously had to rely on the team settings UI to add users to their respective teams and to assign team-scoped predefined or custom roles to those users.
Many global companies and AI teams have tens to hundreds of users in their W&B organizations, distributed across multiple W&B teams. While the user and role management interfaces offer an intuitive, single-pane-of-glass view for organization and team administrators, relying solely on this method for onboarding and access management tasks can be a little unwieldy. This is particularly true for users who automate most of their other administrative operations.
That’s where the W&B SCIM API comes in handy, allowing for streamlined user & access management at both organization and team scopes. It’s partly based on the SCIM standard and we’ve also extended it for product-specific operations that are directly not part of the standard.
We’ve implemented three main groups of API endpoints:
- User resource: To add, list, or deactivate individual users in a W&B organization. It is based on the SCIM standard.
- Group resource: To add, list, or remove W&B teams in a W&B organization, or to add or remove individual users from within a team. It is also based on the SCIM standard.
- Role resource: To manage custom roles and role assignments to users at W&B organization or team scopes. These are product specific extensions and are not based on the SCIM standard.
The SCIM API is available in all W&B deployment types including the Public Cloud, Dedicated Cloud and Self-managed Server instances. Since the latter two are single-tenant, the API endpoints can be invoked against the deployment URL as is. If your W&B organization is deployed on the multi-tenant Public Cloud, users could be part of multiple organizations there, so it’s important for the organization admin invoking the API endpoints to configure the relevant organization in their user settings. This step is critical else the API requests could run against an unintended default organization for the admin.
We would love to learn how SCIM API addresses your admin workflows, and if you have any pertinent requirements. We are also working on other governance capabilities that would appeal to customers across deployment types. Please reach out to your Weights & Biases team or to support@wandb.com if you would like to learn more.
Related Resources:
Introducing Custom Roles for W&B Teams
We're rolling out more nuanced access control for W&B Teams. Here's what you need to know to get started
W&B product newsletter: Updates and new features for January 2024
Here's a quick rundown of what we've been working on in January
W&B Product Newsletter: Updates and New Features for December 2023
Here's a quick rundown of what we've been working on in December
W&B Product Newsletter: Updates and New Features for November 2023
Here's a quick rundown of what we've been working on in November
Add a comment
Iterate on AI agents and models faster. Try Weights & Biases today.