Find Group Member Admins

Description

Lists the member admins of one AttackForge Group. A member admin is a user, or every member of another group (the admin group), allowed to add, invite, update and remove the group's members (see patch_group_members) up to a project access level limit and a project request access level limit, without otherwise being able to change the group. Use this to read the current member admins before changing them with patch_group_member_admins.

Preconditions: the caller must be an Admin; an archived group can be read. Results are ordered by id and paginated (default 10 per page, max 50).

How To Enable

1. Go to Users

2. Select the user you would like to provide access to this tool

3. Click on Access > MCP

4. Click on Add Tools

5. Select the tool find_group_member_admins and click Add

Example Prompts

• Who can manage the members of the Red Team group?

• List the member admins of the ACME group and their access level limits.

• Can the SOC Leads group add people to the SOC group?

Parameters

Parameter	Type	Required	Description
group_id	string	Yes	The id (24-hex) of the group whose member admins you want to list. Obtain it from find_groups.
fields	array	No	Fields to include (id is always returned). Supported values are listed below.
limit	integer	No	Maximum records to return in this page. Default 10, max 50.
skip	integer	No	Number of records to skip (offset). Default 0.

Supported fields values:

Field	Type
id	string
add_user_method	string
admin_group_id	string
admin_group_name	string
allow_user_invite	boolean
created	string
email	string
first_name	string
last_name	string
modified	string
principal_type	string
project_access_level_limit	string
project_request_access_level_limit	string
user_id	string

id is the member admin record id; patch_group_member_admins takes user_id or admin_group_id, not this id. principal_type is 'User' or 'Group'. The user fields (user_id, first_name, last_name, email) are only filled for a user member admin, and the admin group fields (admin_group_id, admin_group_name) only for a group. project_access_level_limit and project_request_access_level_limit are the highest project and project request access levels the member admin may grant; add_user_method is 'email' or 'list'; allow_user_invite says whether the member admin may invite people who have no AttackForge account yet.

Example Response

{
  "data": [
    {
      "id": "65b1f3058cade68ca7bc71e9",
      "principal_type": "Group",
      "admin_group_id": "65b1f0a28cade68ca7bc71b9",
      "admin_group_name": "SOC Leads",
      "project_access_level_limit": "Upload",
      "project_request_access_level_limit": "View",
      "add_user_method": "email",
      "allow_user_invite": false
    }
  ],
  "count": 1,
  "total": 1
}