List of All Group Owners?

Hi Jillian Bejtlich. Aside from using the API, there isn’t currently a way to retrieve all users who are group owners.

However, an automation is a great fit for this problem. I’ve attached an automation type called “Add or remove members from role based on membership type” which can ensure users who are members of a group with a pre-configured membership type are also assigned to a pre-configured role.

So, given you create a role called “All Group Owners” and you assign that role as members to a private group, then you can configure an instance of this automation type to ensure group members who have the membership type “Group Owner” are also automatically added to the “All Group Owners” role, which would grant them access to the private group.

When enabled, the automation will immedidately affect any new or updated group memberships. For pre-existing memberships, it will also run by itself every day at 2:00 AM, checking every owner of every group to ensure membership in the configured role.

To install, first install the attached automation type.

Download and unzip the attached zip

Administration > Automations > Import > (wait for it to upload) > Select the new Automation > Import

Then configure an automation of the newly installed type:

Administration > Automations > Add

Provide a name, description, enablement, and selection the automation type “Add or remove members from role based on membership type”. Also select the membership type and the role you want to assign. This role must already exist, it won’t be created. Save, and it should just work for new members. For analysis, when it runs, it will also log an event message identifying that it added or removed a user from the role.

AddOrRemoveMembersFromRoleBasedOnMembershipType-Automation.zip

Hope this helps!

This looks great. I started writing the automation for this but was finding myself stumped on a few pieces. Looking at the script you provided makes me feel better - this was not an easy one! I just implemented it and will report back after it runs tomorrow morning. THANK YOU!!

Yeah, the daily run for existing members is what complicated it. Handling the membership change events alone would have been much shorter and more straightforward. Let me know how it goes!

Morning! So I set it up yesterday afternoon and checked it this morning. It worked, but it did something a little bit differently than expected. I have 2 roles that have the words "Group Owner" in the name - Elevated Group Owner and Group Owner. The automation put everyone in Elevated Group Owner since it was first alphabetically. Not sure if that was intentionally, but figured I'd let you know.

Morning! So I set it up yesterday afternoon and checked it this morning. It worked, but it did something a little bit differently than expected. I have 2 roles that have the words "Group Owner" in the name - Elevated Group Owner and Group Owner. The automation put everyone in Elevated Group Owner since it was first alphabetically. Not sure if that was intentionally, but figured I'd let you know.

Glad to hear it (mostly) worked, Jillian Bejtlich! Good catch with the similarly-named roles. I've attached an update which ensures the role is an exact name match.

6253.AddOrRemoveMembersFromRoleBasedOnMembershipType-Automation.zip

This comes down to the sub-optimal configuration definition for this automation which accepts a role name string instead of an actual role lookup/search control. And while it's possible for a scripted extension like an automation to define its own custom configuration control like a role lookup, that would have been out of the scope of this sample -- not to mention, built-in role lookup controls are being considered for future versions.

Thanks again!