IRPCUsersAdmin.GetChangedUserAccounts

Administration API / specialized admin session

Gets the user accounts that were added, changed or removed after a version token.

Service	Users `MFiles.IRPCUsersAdmin`
gRPC method	`/MFiles.IRPCUsersAdmin/GetChangedUserAccounts`
HTTP (mf-http-grpc)	`POST /grpc/v1/get-changed-user-accounts`
Request	`GetChangedUserAccountsRequest`
Response	`GetChangedUserAccountsResponse`
Book and level	Administration API, specialized
Kind	admin
Session	Required: the session ID from LogIn in the mfiles-session-id-bin metadata.
Idempotent	no
Returns metadata structure version	no
Streaming	none (unary)

Remarks

Requires the vault right manage_users.
Available only for vaults on Microsoft SQL Server; other vaults fail with "Not implemented.".
Start with version_token 0, then send the returned version_token in the next call. When nothing changed, the response has the same token and empty lists.
Changes are returned oldest first. With max_changes, call again until the lists are empty.

Request: GetChangedUserAccountsRequest

Request structure for the GetChangedUserAccounts method.

Nested message fields are expanded to depth 3; follow a type link for deeper levels and for the type's own page.

Field	Type	Description
`version_token`	`int64`	The `version_token` of the previous response, or 0 for all changes.
`max_changes`	`uint32`	The maximum number of changes to return; 0 for no limit.

Response: GetChangedUserAccountsResponse

Response structure for the GetChangedUserAccounts method.

Nested message fields are expanded to depth 3; follow a type link for deeper levels and for the type's own page. Fields marked (recursive) refer to a type already on their path.

Field	Type	Description
`new_and_modified[]`	repeated `UserAccount`	Accounts added or changed after `version_token`.
`new_and_modified[].id`	`int32`	The ID of the user account.
`new_and_modified[].login_name`	`string`	The login name that is associated with this user account (e.g. 'DOMAIN\user').
`new_and_modified[].vault_roles`	`VAULTROLES`	Bitmask of the vault roles of the user.
`new_and_modified[].vault_roles.all`	`bool`	Specifies all flags set; Including any future flags.
`new_and_modified[].vault_roles.full_control`	`bool`	Can perform any activity in the vault.
`new_and_modified[].vault_roles.can_log_in`	`bool`	Can log in to the vault.
`new_and_modified[].vault_roles.can_create_objects`	`bool`	Can create new documents.
`new_and_modified[].vault_roles.can_see_all_objects`	`bool`	Sees all documents in listings, regardless of security settings and deletion state.
`new_and_modified[].vault_roles.can_undelete_objects`	`bool`	Can undelete previously deleted documents.
`new_and_modified[].vault_roles.can_destroy_objects`	`bool`	Has permission to permanently destroy documents.
`new_and_modified[].vault_roles.can_force_undo_checkout`	`bool`	Has permission to undo a check-out performed by another user.
`new_and_modified[].vault_roles.can_change_all_object_permissions`	`bool`	Can change the security settings of all documents and modify all documents.
`new_and_modified[].vault_roles.can_change_metadata_structure`	`bool`	Can modify the meta data structure of the vault (propertydefs, profiles, value lists etc.).
`new_and_modified[].vault_roles.can_manage_users`	`bool`	Can create, edit and delete user accounts. Cannot add or remove the Vault Manager role.
`new_and_modified[].vault_roles.is_internal_user`	`bool`	An internal user of the vault. This role separates internal enad external users in the vault.
`new_and_modified[].vault_roles.can_manage_traditional_folders`	`bool`	Can create, modify and delete traditional folders. OBSOLETE: const VAULTROLES VAULTROLE_DEFINE_TEMPLATES = 1 << 12; //!< Can define templates.
`new_and_modified[].vault_roles.can_manage_common_views`	`bool`	Can create, modify and delete common views.
`new_and_modified[].vault_roles.can_manage_workflows`	`bool`	Can create, modify and delete workflows. Modifying event handlers within the workflow still requires SERVERACCESS_RUN_CODE.
`new_and_modified[].vault_roles.cannot_manage_private_views`	`bool`	Cannot create or modify private views.
`new_and_modified[].vault_roles.anonymous`	`bool`	Anonymous role.
`new_and_modified[].vault_roles.run_code_on_server`	`bool`	Can run code on the server hosting this vault. Not included in VAULTROLE_FULL_CONTROL, and cannot be ordinarily granted by it.
`new_and_modified[].acl`	`AccessControlList`	Permissions.
`new_and_modified[].acl.checked_out_to_user`	`int32`	Specifies the ID of the user who has extended rights because of the checkout operation performed by her. 0 if such user does not exist.
`new_and_modified[].acl.is_fully_authoritative`	`bool`	Specifies whether this access control list is set to ignore the secondary permissions that come from the latest checked in version.
`new_and_modified[].acl.custom_component`	`AccessControlListComponent`	Accesses the custom component of this ACL.
`new_and_modified[].acl.restrictive_components[]`	repeated `AccessControlListComponentMapEntry`	Accesses the restrictive automatic components of this ACL.
`new_and_modified[].acl.secondary_access_control_list`	`AccessControlList` (recursive)	Secondary ACL used for latest version ACL. Not used for access check if null.
`new_and_modified[].acl.additive_components[]`	repeated `AccessControlListComponentMapEntry`	Accesses the additive automatic components of this ACL.
`new_and_modified[].user_language`	`int32`	The vault language of the user.
`new_and_modified[].external_id`	`string`	The user identity in external system, such as Microsoft Entra (where the identity is a GUID). Read-only.
`deleted[]`	repeated `int32`	IDs of accounts removed after `version_token`.
`version_token`	`int64`	The version of the last returned change; send it in the next call.