Verified:GitHub

uipath-admin

Administer UiPath Identity, Authorization, OMS, IP restriction, and audit via the uip CLI.

9|6|Updated Aug 25, 2017

Search Tags:#cli #identity management #tenant provisioning #role assignment #uipath #access troubleshooting #audit export

Ready to run

npx skills add https://github.com/sergueik/springboot_study --skill uipath-admin-sergueik

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: uipath-admin
Source: https://github.com/sergueik/springboot_study/tree/main/basic-uipath-skills/.github/skills/uipath-admin
Command: npx skills add https://github.com/sergueik/springboot_study --skill uipath-admin-sergueik

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve? Managing UiPath organizations, tenants, users, roles, and audit trails requires navigating multiple admin surfaces (Identity Server, Authorization, OMS, IP Restriction, Audit). This Skill provides structured, safe workflows for the `uip admin` CLI so administrative and investigation tasks are executed correctly without memorizing command syntax or scope rules. ## Core Features & Use Cases - Identity Management: Create, invite, update, and delete users, groups, robot accounts, external OAuth2 apps, personal access tokens, and SMTP settings. - Authorization & Access Control: Manage custom roles and role assignments, list the permission catalog, and check effective access for any principal via the check-access policy decision point. - Organization & Tenant Lifecycle (OMS): Inspect and update organizations, create/enable/disable/delete tenants, provision services, list regions, and poll async operations. - Audit & Investigation: Query and export org/tenant audit events (login history, who-did-what, compliance dumps) as day-wise JSON folders or a single CSV, with scope disambiguation between org and tenant. - IP Restriction & Troubleshooting: Manage IP allowlists and enforcement with lockout safety, plus playbooks for diagnosing access-denied, login failures, role misconfiguration, and PAT/app auth issues. - Use Case: A security admin asks "Show me failed logins for [email protected] this month and export Q4 audit events for compliance." The Skill resolves the user ID, queries org-scoped login events, and exports the date range to a CSV. ## Quick Start Ask the assistant to list all users in your UiPath organization or to show failed login attempts for a specific user over the past week using uip admin audit.

Frequently Asked Questions about uipath-admin

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I query UiPath audit logs for a specific user?▼

Resolve the user's GUID with uip admin users list --search <email>, then run uip admin audit org events with --user-id, --type for the event, and a bounded --from-date/--to-date window. Login events live at org scope, not tenant scope.

How do I export UiPath audit events to CSV?▼

Run uip admin audit <org|tenant> export with --from-date, --to-date, --output-path, and --file-format csv. The CLI writes a single merged CSV named audit_<from>_<to>_<generated-at>.csv inside the output directory, with whole-day inclusive date bounds.

What is the difference between uip admin audit and uip or audit-logs?▼

uip admin audit covers organization and tenant audit trails (identity, membership, login history, compliance exports), while uip or audit-logs is the Orchestrator-operational audit surface with a different schema. All org/tenant audit requests should use uip admin audit.

How do I assign a role to a user in UiPath?▼

First resolve the principal via users list or groups list to get the ID, then verify the role's ownerServiceName matches the assignment scope path, and run uip admin authorization roles assignments create with --role-id, --identity-id, and --identity-type.

Why does my UiPath audit query return a 401 error?▼

A 401 means the token is missing the Audit.Read scope. Do not retry the call; run uip logout && uip login to mint a fresh token that includes the required scope.

Can I enable IP restriction without locking myself out?▼

Yes, but first run uip admin ip-restriction my-ip and confirm your public IP is covered by an entry in ip-ranges list. Then enable enforcement with --confirm after acknowledging the lockout impact, since recovery requires platform-side action.