uipath-admin

Category: Tools & Productivity | Uploader: UiPath | Downloads: 0 | Version: v1.0（Latest）

UiPath Admin — Identity Server management via uip admin. Users, groups, robot accounts, external apps (OAuth2), credential generation (Client ID/Secret). For Orchestrator folders/jobs→uipath-platform. For RPA workflows→uipath-rpa.

Changelog: Source: GitHub https://github.com/UiPath/skills

Directory Structure

Current level: tree/main/skills/uipath-admin/

📁 references/
- 📄 external-app-management.md 3.1 KB
- 📄 group-management.md 2.3 KB
- 📄 identity-commands.md 9.9 KB
- 📄 robot-account-management.md 1.7 KB
- 📄 user-management.md 3.1 KB
📄 SKILL.md 6.2 KB

SKILL.md

---
name: uipath-admin
description: "UiPath Admin — Identity Server management via uip admin. Users, groups, robot accounts, external apps (OAuth2), credential generation (Client ID/Secret). For Orchestrator folders/jobs→uipath-platform. For RPA workflows→uipath-rpa."
allowed-tools: Bash, Read, Write, Edit, Glob, Grep
---

# UiPath Admin

> **Preview** — Under active development. Command coverage will expand.

Identity Server management via `uip admin`. Users, groups, robot accounts, external OAuth2 apps.

## When to Use This Skill

- **Manage identity users** — list, create, invite, update, delete
- **Manage groups** — CRUD + add/remove members
- **Manage robot accounts** — create, update, delete unattended robot identities
- **Manage external apps** — OAuth2 clients, generate/rotate secrets
- **Onboard human user** — invite, assign to groups
- **Onboard robot account** — create account, assign to groups
- **Identity concepts** — partitions, organizations, OAuth2 scopes
- **Generate Client ID/Secret** — credentials for API or robot authentication

## Critical Rules

1. **Verify login first.** Run `uip login status --output json`. If not logged in: `uip login`.
2. **Organization ID is resolved automatically from login.** CLI reads org ID from active session.
3. **Discover before creating.** `list` before `create` to avoid duplicates. Applies to robot accounts, groups, and external apps — not to `users invite`.
4. **Use `--output json` on all commands.** Parse programmatically. Present results conversationally.
5. **Secrets shown only once.** When creating external apps or generating secrets, secret value appears only in creation response. Warn user to save immediately.
6. **External apps require scopes at creation.** `--scope` is required. Common scopes: `OR.Folders`, `OR.Assets`, `OR.Queues`, `OR.Jobs`, `OR.Machines`.
7. **Group membership uses user IDs, not usernames.** Resolve IDs via `users list` before `groups members add` or `groups members revoke`.
8. **Confirm before delete.** Always confirm with user before running `delete` on users, groups, robot accounts, or external apps.
9. **Stop on error (interactive use).** If any command fails, show error to user. Do not retry auth failures — ask user to run `uip login`.

## What NOT to Do

1. **Never delete built-in groups.** `type: "BuiltIn"` groups cannot be deleted. Only custom groups.
2. **Never pass IDs as flags.** Resource IDs and names are positional arguments: `groups members add <GROUP_ID> --user-ids ...`, NOT `--group-id <GROUP_ID>`. Same for all `get`, `update`, `delete`, `create` subcommands.

## Quick Start

The most common identity flow is **user management** — inviting users, assigning them to groups, and managing access.

### Step 0 — Verify login

```bash
uip login status --output json
```

If not logged in: `uip login`. The CLI reads org ID from the active session automatically.

### Step 1 — Invite a user

```bash
uip admin users invite \
  --email "<USER_EMAIL>" \
  --name "<FIRST_NAME>" \
  --surname "<LAST_NAME>" \
  --output json
```

### Step 2 — Find the user once they accept

```bash
uip admin users list \
  --search "<USER_EMAIL>" --output json
```

### Step 3 — Assign to a group

```bash
uip admin groups list --output json
uip admin groups members add <GROUP_ID> \
  --user-ids "<USER_ID>" \
  --output json
```

## Key Concepts

### Organization Hierarchy

```
Organization (org)
  └── Partition (= org in most cases)
        ├── Users           ← human identities
        ├── Groups          ← role containers (BuiltIn + Custom)
        ├── Robot Accounts  ← unattended automation identities
        └── External Apps   ← OAuth2 clients (Client ID + Secret)
```

### Robot Accounts vs External Apps

These are separate concepts — do not conflate them.

| Concept | Purpose | Managed By |
|---------|---------|------------|
| **Robot account** | Identity — who the robot is | Identity Server (`uip admin`) |
| **Robot credentials** | Per-robot Client ID + Secret for machine auth | Orchestrator (machine connection) |
| **External app** | OAuth2 client for API integrations, CI/CD | Identity Server (`uip admin`) |

Robot credentials are provisioned automatically by Orchestrator when connecting a robot to a machine — not by creating external apps.

## Completion Output

After any mutation (create, update, delete, invite, members add, members revoke, generate-secret):

1. Show the command result (success or failure)
2. For creates: display the new resource ID
3. For external-app create or generate-secret: **highlight the secret value and warn user to save it**
4. Offer logical next steps:
   - After creating a robot account → "Assign to a group for role-based access?"
   - After creating an external app → "Generate an additional secret?"
   - After inviting a user → "Check user list to see when they accept?"

## Task Navigation

| I need to... | Read first |
|---|---|
| **Full CLI command reference** | [references/identity-commands.md](references/identity-commands.md) |
| **Manage users** (list, create, invite, update, delete) | [references/user-management.md](references/user-management.md) |
| **Manage groups** (CRUD + membership) | [references/group-management.md](references/group-management.md) |
| **Manage robot accounts** | [references/robot-account-management.md](references/robot-account-management.md) |
| **Manage external apps** (OAuth2 + secrets) | [references/external-app-management.md](references/external-app-management.md) |

## References

- **[identity-commands.md](references/identity-commands.md)** — Complete CLI reference for all `uip admin` commands with flags, arguments, and output codes
- **[user-management.md](references/user-management.md)** — User lifecycle workflows: discover, create, invite, update, delete, pagination, sorting
- **[group-management.md](references/group-management.md)** — Group CRUD, membership management (add/remove members), built-in vs custom groups
- **[robot-account-management.md](references/robot-account-management.md)** — Robot account lifecycle, relationship to external apps
- **[external-app-management.md](references/external-app-management.md)** — OAuth2 client management, secret generation/rotation, scope reference

Comments 0

Latest | Hot

Please login before commenting.

Loading comments...

uipath-admin

Directory Structure

SKILL.md

Report

Notice