Patch Group Member Admins

Description

Adds, updates or removes the member admins of an existing AttackForge Group. This is a write operation. A member admin is a user, or every member of another group (the admin group), allowed to add, invite, update and remove the group's members (see patch_group_members) up to a project access level limit and a project request access level limit, without otherwise being able to change the group.

One call can mix up to 50 operations, one per user or admin group, each naming user_id or admin_group_id; the call is refused without changing anything if any operation cannot be applied. Discover the current member admins with find_group_member_admins, users with find_users and groups with find_groups.

The shape of args is declared inline (see Building args for Write Tools), so no preparatory call is needed.

Preconditions: the caller must be an Admin, and the group must exist and not be archived. Nobody is emailed. On success the user and admin group ids are returned, sorted by outcome.

How To Enable

1. Go to Users

2. Select the user you would like to provide access to this tool

3. Click on Access > MCP

4. Click on Add Tools

5. Select the tool patch_group_member_admins and click Add

Example Prompts

• Let Jane manage the members of the Red Team group, up to Upload access to its projects.

• Make the SOC Leads group member admins of the SOC group.

• Allow Bob to invite new users to the Contractors group.

• Remove Jane as a member admin of the ACME group.

Parameters

Parameter	Type	Required	Description
args	object	Yes	The group-member-admins patch payload - see the keys below.

args keys:

Key	Type	Required	Description
group_id	string	Yes	Id (24-hex) of the group whose member admins are changed - the group being managed, not a group named as a member admin. Source: find_groups. The member admins of an archived group cannot be changed.
operations	array	Yes	1 to 50 operations, at most one per user or admin group - see the keys below.

operations item keys:

Key	Type	Required	Description
type	string	Yes	'add', 'update' or 'remove'.
user_id	string	No	Id (24-hex) of a user, whose member admin settings the operation changes. Give user_id or admin_group_id but not both. To add, the user must exist and not be deleted (source: find_users); to update or remove, the user must be a member admin of the group (source: find_group_member_admins).
admin_group_id	string	No	Id (24-hex) of the admin group, whose members all become member admins of the group named by group_id. Give user_id or admin_group_id but not both. To add, the admin group must exist and not be archived (source: find_groups); to update or remove, it must be a member admin of the group (source: find_group_member_admins).
project_access_level_limit	string	No	'None', 'View', 'Upload' or 'Edit': the highest project access level this member admin may grant to the members they add or update. Required for 'add'; omit to leave it unchanged on an existing member admin. Not accepted on 'remove'.
project_request_access_level_limit	string	No	'None', 'View', 'Edit' or 'Action': the highest project request access level this member admin may grant to the members they add or update. Required for 'add'; omit to leave it unchanged on an existing member admin. Not accepted on 'remove'.
add_user_method	string	No	How this member admin finds the users they add in the AttackForge UI: 'email' requires typing the user's email address, 'list' lets them pick from the list of users. It does not limit patch_group_members. Defaults to 'email' on a new member admin; omit to leave it unchanged on an existing one. Not accepted on 'remove'.
allow_user_invite	boolean	No	Whether this member admin may invite people who have no AttackForge account yet, from the AttackForge UI or with an 'invite' operation of patch_group_members. Defaults to false on a new member admin; omit to leave it unchanged on an existing one. Not accepted on 'remove'.

An 'update' must supply at least one of project_access_level_limit, project_request_access_level_limit, add_user_method or allow_user_invite. Adding a user or admin group that is already a member admin updates it instead. unchanged lists the member admins that already had the settings asked for - it is not an error and the call should not be retried.

Example Response

{
  "group_id": "65b1f0a28cade68ca7bc71a4",
  "added": [
    "65b1f0a28cade68ca7bc71b9"
  ],
  "updated": [],
  "removed": [
    "65a440c08cade68ca7bc7192"
  ],
  "unchanged": []
}