The User Management server enables programmatic management of user accounts, role assignments, and user group memberships within IDMC organizations.
This MCP server provides AI agents with the ability to manage user accounts within IDMC organizations. It enables automated user lifecycle operations including creation, retrieval, role assignment updates, and deletion, ensuring consistent identity and access governance. By exposing the IDMCplatform REST API v3 Users resource, it allows agents to enforce role-based access control policies programmatically.
Key capabilities
This MCP server offers the following key capabilities:
•User lifecycle management. Creates, retrieves, and deletes user accounts within an IDMC organization using administrator-level operations.
•Group membership management. Adds or removes users from user groups to control collective access policies.
•Role assignment control. Updates role assignments for users to manage privileges for IDMC tasks and assets.
Use cases
Use this MCP server to address the following use cases:
•Automated employee onboarding. Create new IDMC user accounts and assign appropriate roles and groups based on organizational requirements.
•Dynamic access provisioning. Update user role and group memberships in response to organizational changes or access requests.
•Access governance auditing. Retrieve all user details and role assignments to generate compliance reports and verify access policies.
Tools
The following table describes the tools available on this MCP server:
Tool
Description
add_groups_to_user
Assigns one or more user groups to a user, granting them collective access policies defined for those groups.
add_roles_to_user
Assigns one or more roles to a user, granting them additional privileges for IDMC tasks and assets.
create_user
Creates a new user account in the IDMC organization with specified roles and group assignments.
delete_user
Deletes a user account from the IDMC organization permanently using the user's unique identifier.
get_user_details
Retrieves user account details for all users in an IDMC organization with optional filtering by user ID or user name.
remove_groups_from_user
Revokes one or more user group memberships from a user along with the collective access policies granted by those groups.
remove_roles_from_user
Removes one or more role assignments from a user along with the associated privileges.
Note:
In AI Agent Engineering, the MCP server tools are called "actions."