Groups

Download AsyncAPI spec

Events emitted when groups are created, updated, deleted, or have their user membership modified in a Qlik Cloud tenant. These events enable real-time tracking of group lifecycle and user assignment changes.

These events are available for consumption via:

Audits (Events)

Deprecation notice

These events are deprecated and will be removed on or after November 30, 2026.

Use the Groups events in the core namespace instead. One exception: com.qlik.group.user.group.claim.updated maps to com.qlik.core.user.updated in Users events, not Groups events. For the full event mapping, see the deprecation notice.

Published when a group is created in the tenant.

Payload

object

id string

Required

Identifies the event.

minLength = 1
time string

Timestamp of when the occurrence happened. Must adhere to RFC 3339.

minLength = 1, format = "date-time"
type string

Required

Unique identifier for the event type.

default = "com.qlik.v1.group.created"
source string

Required

Identifies the context in which an event happened.

minLength = 1, format = "uri-reference", default = "com.qlik/identities"
specversion string

Required

The version of the CloudEvents specification which the event uses.

minLength = 1
datacontenttype string

Content type of the data value. Must adhere to RFC 2046 format.

minLength = 1
userid string

Unique identifier for the user triggering the event.
tenantid string

Required

Unique identifier for the tenant related to the event.
data object

Represents a group.
Show data properties
- id string
  
  Required
  
  Unique identifier for the group.
  
  format = "uid"
- name string
  
  Required
  
  Name of the group as it appears in the identity provider.
- idpId string
  
  Unique identifier for the source identity provider.
  
  format = "uid"
- status string
  
  Required
  
  Current status for the group within the platform.
  
  Can be one of: "active""disabled"
- tenantId string
  
  Required
  
  Unique identifier for the tenant associated with the given group.
  
  format = "uid"
- createdAt string
  
  Required
  
  Timestamp when the group was created in the platform.
  
  format = "date-time"
- createdBy string
  
  Unique identifier for the user who created this group.
- updatedBy string
  
  Unique identifier for the user who last updated this group.
- description string
  
  User-defined description for custom groups.
- providerType string
  
  Filterable
  
  The type of provider for the group.
  
  Can be one of: "idp""custom"
- assignedRoles array of objects
  
  Represents a role entity stored in the database.
  
  Show assignedRoles properties
  
  id string
  
  Required
  
  Unique identifier for this role.
  
  format = "uid"
  
  name string
  
  Required
  
  Name of the role.
  
  type string
  
  Required
  
  Whether the role is a default Qlik role or a custom role.
  
  Can be one of: "default""custom"
  
  level string
  
  Required
  
  Role level (admin or user).
  
  Can be one of: "admin""user"
- lastUpdatedAt string
  
  Required
  
  Timestamp when the group was last updated in the platform.
  
  format = "date-time"

com.qlik.v1.group.created

Example payload of the "Group created" event

{
  "id": "A234-1234-1234",
  "time": "2018-10-30T07:06:22Z",
  "type": "com.qlik.v1.group.created",
  "source": "com.qlik/identities",
  "specversion": "1.0",
  "datacontenttype": "string",
  "userid": "VZhiEfgW2bLd7HgR-jjzAh6VnicipweT",
  "tenantid": "VZhiEfgW2bLd7HgR-jjzAh6VnicipweT",
  "data": {
    "id": "507f191e810c19729de860ea",
    "name": "Development",
    "idpId": "4ecbe7f9e8c1c9092c000027",
    "status": "active",
    "tenantId": "VZhiEfgW2bLd7HgR-jjzAh6VnicipweT",
    "createdAt": "2021-03-21T17:32:28Z",
    "createdBy": "string",
    "updatedBy": "string",
    "description": "string",
    "providerType": "idp",
    "assignedRoles": [
      {
        "id": "507f191e810c19729de860ea",
        "name": "My Custom Role",
        "type": "custom",
        "level": "user"
      }
    ],
    "lastUpdatedAt": "2021-03-22T10:01:02Z"
  }
}

Published when a group is removed from the tenant.

Payload

object

id string

Required

Identifies the event.

minLength = 1
time string

Timestamp of when the occurrence happened. Must adhere to RFC 3339.

minLength = 1, format = "date-time"
type string

Required

Unique identifier for the event type.

default = "com.qlik.v1.group.deleted"
source string

Required

Identifies the context in which an event happened.

default = "com.qlik/groups"
specversion string

Required

The version of the CloudEvents specification which the event uses.

minLength = 1
datacontenttype string

Content type of the data value. Must adhere to RFC 2046 format.

minLength = 1
userid string

Unique identifier for the user triggering the event.
tenantid string

Required

Unique identifier for the tenant related to the event.
data object

Represents a group.
Show data properties
- id string
  
  Required
  
  Unique identifier for the group.
  
  format = "uid"
- name string
  
  Required
  
  Name of the group as it appears in the identity provider.
- idpId string
  
  Unique identifier for the source identity provider.
  
  format = "uid"
- status string
  
  Required
  
  Current status for the group within the platform.
  
  Can be one of: "active""disabled"
- tenantId string
  
  Required
  
  Unique identifier for the tenant associated with the given group.
  
  format = "uid"
- createdAt string
  
  Required
  
  Timestamp when the group was created in the platform.
  
  format = "date-time"
- createdBy string
  
  Unique identifier for the user who created this group.
- updatedBy string
  
  Unique identifier for the user who last updated this group.
- description string
  
  User-defined description for custom groups.
- providerType string
  
  Filterable
  
  The type of provider for the group.
  
  Can be one of: "idp""custom"
- assignedRoles array of objects
  
  Represents a role entity stored in the database.
  
  Show assignedRoles properties
  
  id string
  
  Required
  
  Unique identifier for this role.
  
  format = "uid"
  
  name string
  
  Required
  
  Name of the role.
  
  type string
  
  Required
  
  Whether the role is a default Qlik role or a custom role.
  
  Can be one of: "default""custom"
  
  level string
  
  Required
  
  Role level (admin or user).
  
  Can be one of: "admin""user"
- lastUpdatedAt string
  
  Required
  
  Timestamp when the group was last updated in the platform.
  
  format = "date-time"

com.qlik.v1.group.deleted

Example payload of the "Group deleted" event

{
  "id": "A234-1234-1234",
  "time": "2018-10-30T07:06:22Z",
  "type": "com.qlik.v1.group.deleted",
  "source": "com.qlik/groups",
  "specversion": "1.0",
  "datacontenttype": "string",
  "userid": "VZhiEfgW2bLd7HgR-jjzAh6VnicipweT",
  "tenantid": "VZhiEfgW2bLd7HgR-jjzAh6VnicipweT",
  "data": {
    "id": "507f191e810c19729de860ea",
    "name": "Development",
    "idpId": "4ecbe7f9e8c1c9092c000027",
    "status": "active",
    "tenantId": "VZhiEfgW2bLd7HgR-jjzAh6VnicipweT",
    "createdAt": "2021-03-21T17:32:28Z",
    "createdBy": "string",
    "updatedBy": "string",
    "description": "string",
    "providerType": "idp",
    "assignedRoles": [
      {
        "id": "507f191e810c19729de860ea",
        "name": "My Custom Role",
        "type": "custom",
        "level": "user"
      }
    ],
    "lastUpdatedAt": "2021-03-22T10:01:02Z"
  }
}

Published when a group is updated.

Payload

object

id string

Required

Identifies the event.

minLength = 1
time string

Timestamp of when the occurrence happened. Must adhere to RFC 3339.

minLength = 1, format = "date-time"
type string

Required

Unique identifier for the event type.

default = "com.qlik.v1.group.updated"
source string

Required

Identifies the context in which an event happened.

minLength = 1, format = "uri-reference", default = "com.qlik/identities"
specversion string

Required

The version of the CloudEvents specification which the event uses.

minLength = 1
datacontenttype string

Content type of the data value. Must adhere to RFC 2046 format.

minLength = 1
userid string

Unique identifier for the user triggering the event.
tenantid string

Required

Unique identifier for the tenant related to the event.
data object

Represents a group.
Show data properties
- id string
  
  Required
  
  Unique identifier for the group.
  
  format = "uid"
- name string
  
  Required
  
  Name of the group as it appears in the identity provider.
- idpId string
  
  Unique identifier for the source identity provider.
  
  format = "uid"
- status string
  
  Required
  
  Current status for the group within the platform.
  
  Can be one of: "active""disabled"
- tenantId string
  
  Required
  
  Unique identifier for the tenant associated with the given group.
  
  format = "uid"
- createdAt string
  
  Required
  
  Timestamp when the group was created in the platform.
  
  format = "date-time"
- createdBy string
  
  Unique identifier for the user who created this group.
- updatedBy string
  
  Unique identifier for the user who last updated this group.
- description string
  
  User-defined description for custom groups.
- providerType string
  
  Filterable
  
  The type of provider for the group.
  
  Can be one of: "idp""custom"
- assignedRoles array of objects
  
  Represents a role entity stored in the database.
  
  Show assignedRoles properties
  
  id string
  
  Required
  
  Unique identifier for this role.
  
  format = "uid"
  
  name string
  
  Required
  
  Name of the role.
  
  type string
  
  Required
  
  Whether the role is a default Qlik role or a custom role.
  
  Can be one of: "default""custom"
  
  level string
  
  Required
  
  Role level (admin or user).
  
  Can be one of: "admin""user"
- lastUpdatedAt string
  
  Required
  
  Timestamp when the group was last updated in the platform.
  
  format = "date-time"
- updates array of objects
  
  Collection of updates performed on the resource.
  
  Show updates properties
  
  path string
  
  Field that was updated.
  
  newValue string
  
  Value of the field after the update.
  
  oldValue string
  
  Value of the field before the update.

com.qlik.v1.group.updated

Example payload of the "Group updated" event

{
  "id": "A234-1234-1234",
  "time": "2018-10-30T07:06:22Z",
  "type": "com.qlik.v1.group.updated",
  "source": "com.qlik/identities",
  "specversion": "1.0",
  "datacontenttype": "string",
  "userid": "VZhiEfgW2bLd7HgR-jjzAh6VnicipweT",
  "tenantid": "VZhiEfgW2bLd7HgR-jjzAh6VnicipweT",
  "data": {
    "id": "507f191e810c19729de860ea",
    "name": "Development",
    "idpId": "4ecbe7f9e8c1c9092c000027",
    "status": "active",
    "tenantId": "VZhiEfgW2bLd7HgR-jjzAh6VnicipweT",
    "createdAt": "2021-03-21T17:32:28Z",
    "createdBy": "string",
    "updatedBy": "string",
    "description": "string",
    "providerType": "idp",
    "assignedRoles": [
      {
        "id": "507f191e810c19729de860ea",
        "name": "My Custom Role",
        "type": "custom",
        "level": "user"
      }
    ],
    "lastUpdatedAt": "2021-03-22T10:01:02Z",
    "updates": [
      {
        "path": "/attributePath",
        "newValue": "Dan",
        "oldValue": "Dylan"
      }
    ]
  }
}

Published when a group has been updated or deleted, with a list of affected users. For large groups, multiple events are sent, each with different affectedUsers, for the same group update/delete event. Check fullyProcessed to determine if additional events are coming.

Payload

object

id string

Required

Identifies the event.

minLength = 1
time string

Timestamp of when the occurrence happened. Must adhere to RFC 3339.

minLength = 1, format = "date-time"
type string

Required

Unique identifier for the event type.

default = "com.qlik.v1.group.users.modified"
source string

Required

Identifies the context in which an event happened.

minLength = 1, format = "uri-reference", default = "com.qlik/identities"
specversion string

Required

The version of the CloudEvents specification which the event uses.

minLength = 1
datacontenttype string

Content type of the data value. Must adhere to RFC 2046 format.

minLength = 1
userid string

Unique identifier for the user triggering the event.
tenantid string

Required

Unique identifier for the tenant related to the event.
data object

Represents a group.
Show data properties
- id string
  
  Required
  
  Unique identifier for the group.
  
  format = "uid"
- name string
  
  Required
  
  Name of the group as it appears in the identity provider.
- idpId string
  
  Unique identifier for the source identity provider.
  
  format = "uid"
- status string
  
  Required
  
  Current status for the group within the platform.
  
  Can be one of: "active""disabled"
- tenantId string
  
  Required
  
  Unique identifier for the tenant associated with the given group.
  
  format = "uid"
- createdAt string
  
  Required
  
  Timestamp when the group was created in the platform.
  
  format = "date-time"
- createdBy string
  
  Unique identifier for the user who created this group.
- updatedBy string
  
  Unique identifier for the user who last updated this group.
- description string
  
  User-defined description for custom groups.
- providerType string
  
  Filterable
  
  The type of provider for the group.
  
  Can be one of: "idp""custom"
- assignedRoles array of objects
  
  Represents a role entity stored in the database.
  
  Show assignedRoles properties
  
  id string
  
  Required
  
  Unique identifier for this role.
  
  format = "uid"
  
  name string
  
  Required
  
  Name of the role.
  
  type string
  
  Required
  
  Whether the role is a default Qlik role or a custom role.
  
  Can be one of: "default""custom"
  
  level string
  
  Required
  
  Role level (admin or user).
  
  Can be one of: "admin""user"
- lastUpdatedAt string
  
  Required
  
  Timestamp when the group was last updated in the platform.
  
  format = "date-time"
- updates array of objects
  
  Collection of updates performed on the resource.
  
  Show updates properties
  
  path string
  
  Field that was updated.
  
  newValue string
  
  Value of the field after the update.
  
  oldValue string
  
  Value of the field before the update.
- deleted boolean
  
  Describes whether the group was deleted (true) or only updated (false).
- affectedUsers array of strings
  
  A list of user original IDs affected by this group update or delete.
- fullyProcessed boolean
  
  Describes whether all affected users are included in this event or if additional events will be sent for the same group change.

com.qlik.v1.group.users.modified

Example payload of the "Multiple users' assigned groups have been modified" event

{
  "id": "A234-1234-1234",
  "time": "2018-10-30T07:06:22Z",
  "type": "com.qlik.v1.group.users.modified",
  "source": "com.qlik/identities",
  "specversion": "1.0",
  "datacontenttype": "string",
  "userid": "VZhiEfgW2bLd7HgR-jjzAh6VnicipweT",
  "tenantid": "VZhiEfgW2bLd7HgR-jjzAh6VnicipweT",
  "data": {
    "id": "507f191e810c19729de860ea",
    "name": "Development",
    "idpId": "4ecbe7f9e8c1c9092c000027",
    "status": "active",
    "tenantId": "VZhiEfgW2bLd7HgR-jjzAh6VnicipweT",
    "createdAt": "2021-03-21T17:32:28Z",
    "createdBy": "string",
    "updatedBy": "string",
    "description": "string",
    "providerType": "idp",
    "assignedRoles": [
      {
        "id": "507f191e810c19729de860ea",
        "name": "My Custom Role",
        "type": "custom",
        "level": "user"
      }
    ],
    "lastUpdatedAt": "2021-03-22T10:01:02Z",
    "updates": [
      {
        "path": "/attributePath",
        "newValue": "Dan",
        "oldValue": "Dylan"
      }
    ],
    "deleted": true,
    "affectedUsers": [
      "VZhiEfgW2bLd7HgR-jjzAh6VnicipweT"
    ],
    "fullyProcessed": true
  }
}