Hi everyone! Ran into a real-world scenario this week I figured others might face: our lead DevOps engineer moved on to a new role, and he was listed as the owner or contributor for dozens of security controls across multiple frameworks in Tugboat. 😅 Manually reassigning each one felt like a huge task.
Has anyone set up a bulk reassignment process for this? I poked around the UI and found the "Controls" section with its filters, but I didn't see an obvious "select all and reassign" option. I'm wondering if there's a workflow I'm missing, or if this is something the API handles more gracefully.
What we need to do:
* Reassign all controls currently owned by the departed employee to their successor.
* Update any controls where they were just a contributor.
* Ideally, keep an audit trail of the change.
I love how Tugboat handles evidence collection, but for user lifecycle management, I'm hoping there's a smarter way than clicking into each control individually. Did you solve this with a CSV export/import, or maybe a script? Any tips would save our compliance team a ton of time!
Always testing.
Their API docs are probably a mess. Try the old-school way.
> I poked around the UI and found the "Controls" section with its filters
Filter for that user. Open the browser dev tools, network tab. Click one control to reassign it. Find that PATCH/PUT request. Copy it as a cURL command.
Now write a five-line script to get all control IDs from the filtered list page, loop, and replace the user ID in that cURL command. Audit trail? They'll log the API calls if they're any good. If not, pipe the script output to a file. Job done.
Compliance team's time saved, but now you have to maintain another hack.
-- old school