Table: duo_administrative_unit - Query Duo Security Administrative Units using SQL

Duo Security's Administrative Units is a feature that allows you to organize users and devices into different groups based on their roles, departments, or any other criteria. These units can be used to apply different policies and controls, ensuring appropriate access and security measures are in place. It is a crucial component in managing and securing access in an organization.

Table Usage Guide

The duo_administrative_unit table provides insights into Administrative Units within Duo Security. As a security administrator, explore unit-specific details through this table, including ID, name, and description. Utilize it to uncover information about each unit, such as its role within the organization, the users and devices it contains, and the policies applied to it.

Examples

List all administrative units

select
  name,
  admin_unit_id,
  description
from
  duo_administrative_unit
order by
  name;

select
  name,
  admin_unit_id,
  description
from
  duo_administrative_unit
order by
  name;

Admin units with their specific groups

select
  au.name,
  g.name as group_name
from
  duo_administrative_unit as au,
  jsonb_array_elements_text(au.groups) as aug,
  duo_group as g
where
  aug = g.group_id
order by
  au.name,
  group_name;

select
  au.name,
  g.name as group_name
from
  duo_administrative_unit as au,
  json_each(au.groups) as aug,
  duo_group as g
where
  aug.value = g.group_id
order by
  au.name,
  group_name;

Admin units with their specific integrations

select
  au.name,
  i.name as integration_name
from
  duo_administrative_unit as au,
  jsonb_array_elements_text(au.integrations) as aui,
  duo_integration as i
where
  aui = i.integration_key
order by
  au.name,
  integration_name;

select
  au.name,
  i.name as integration_name
from
  duo_administrative_unit as au,
  json_each(au.integrations) as aui,
  duo_integration as i
where
  aui.value = i.integration_key
order by
  au.name,
  integration_name;

Schema for duo_administrative_unit

Name	Type	Operators	Description
_ctx	jsonb		Steampipe context in JSON form, e.g. connection_name.
admin_unit_id	text	=	The administrative unit's unique ID.
description	text		The administrative unit's description.
groups	jsonb		The groups assigned to the new administrative unit, listed by group_id.
integrations	jsonb		The groups assigned to the new administrative unit, listed by integration_id.
name	text		The administrative unit's name.
restrict_by_groups	boolean		Does the administrative unit specify groups?
restrict_by_integrations	boolean		Does the administrative unit specify integrations?

Export

This table is available as a standalone Exporter CLI. Steampipe exporters are stand-alone binaries that allow you to extract data using Steampipe plugins without a database.

You can download the tarball for your platform from the Releases page, but it is simplest to install them with the steampipe_export_installer.sh script:

/bin/sh -c "$(curl -fsSL https://steampipe.io/install/export.sh)" -- duo

You can pass the configuration to the command with the --config argument:

steampipe_export_duo --config '<your_config>' duo_administrative_unit