Search User Roles

Search for user role assignments in CrowdStrike.

Options

Field Definition Type Required

Result Set

Choose a method to filter search results:

  • First Matching Record: Returns the first record that matches.

  • First 100 Matching Records: Returns the first 100 matching records.

  • Stream Matching Records: Passes all matching records from your parent flow to a helper flow.

    Selecting this option adds a Streaming input section to the card where you can select a helper flow for streaming and add custom extensible fields.

Dropdown

TRUE

Input

Field Definition Type Required

Search Criteria

User ID

Unique identifier of the user.

You can't assign multiple user IDs.

Text

TRUE

CID

The customer ID of the CrowdStrike user.

For Falcon Complete Cloud Security customers, if you're making requests from the parent customer ID, use the CIDvalue to specify the child customer ID for which you want to retrieve the role assignment details.

A user ID may have the same role assigned in multiple customer IDs. Assigning a CID value ensures that the role details are retrieved from the correct customer ID.

A request without a CID value retrieves the role assignment details for the customer ID that makes the request.

Multiple values aren't supported.

Text

FALSE

Direct Only

Specifies the role grant type to return.

  • True: Returns only directly assigned roles.
  • False or not provided: Returns roles that are directly assigned or inherited.

True/False

FALSE

Role Name

The name of the role.

Text

FALSE

Role ID

The ID of the role.

Text

FALSE

Sort

The attribute and direction to order the results.

  • CID - ascending

  • CID - descending

  • Role Name - Ascending. This is the default.

  • Role Name - Descending

  • Type - Ascending

  • Type - Descending

Dropdown

FALSE

Streaming

Flow

Click Choose Flow to browse and select a helper flow where the search results will be streamed, then click Choose to confirm.

Optionally, click the empty field under Click or drop here to create and add custom extensible fields that pass data to the helper flow. These fields are added as key/value pairs under the State output object in the helper flow.

This field appears when you select Stream Matching Records from the Result Set option.

To learn how to return large numbers of records, see Stream matching records with a helper flow.

Flow

TRUE

Record Limit

Specify the number of records to stream.

  • The Record Limit field can't be set to 0.

  • When the Record Limit field is set to greater than 0, the stream returns up to the maximum number specified.

  • When the Record Limit field is empty, null, or not selected, the stream returns all records.

  • The default value is 500000.

  • The valid range is from 0 to 500000.

This field appears when you select Stream Matching Records from the Result Set option.

Number

FALSE

Output

Field Definition Type

Result

User Roles

List of Objects

User ID

The unique ID of the user.

Text

CID

The customer ID of the CrowdStrike user.

Text

Role ID

The ID of the role.

Text

Role Name

The name of the role.

Text

Grant Type

Grant the type of the role.

Text

Records Streamed

Number of records streamed in a streaming flow.

This field appears when you select Stream Matching Records from the Result Set option.

Number

Related topics

CrowdStrike connector

Cards in flows

To access the CrowdStrike API documentation, sign in to your CrowdStrike Falcon console.