How to identify if the user is admin user or have admin privileges?

Hi @akshaybhujbale,

Assuming you would like to do it programmatically you can use classes from org.apache.jackrabbit.api.security.user package. Mainly it will be UserManager, Authorizable, User and Group.

• To check if user is an admin use isAdmin() method like this:
  

  import org.apache.jackrabbit.api.security.user.*;
  
  UserManager userManager = resourceResolver.adaptTo(UserManager.class);
  User user = (User) userManager.getAuthorizable("test-user");
  user.isAdmin();

• To verify if user is part of administrators group you can try one of below alternative options:
  

  import org.apache.jackrabbit.api.security.user.*;
  
  UserManager userManager = resourceResolver.adaptTo(UserManager.class);
  User user = (User) userManager.getAuthorizable("test-user");
  
  Group group = (Group) userManager.getAuthorizable("administrators");
  group.isMember(user);

  second option for the same
  

  import org.apache.jackrabbit.api.security.user.*;
  
  UserManager userManager = resourceResolver.adaptTo(UserManager.class);
  User user = (User) userManager.getAuthorizable("test");
  
  Iterator<Group> groups = user.memberOf();
  while (groups.hasNext()) {
      Group group = groups.next();
      if (group.getID().equals("administrators")) {
          break;
      }
  } 

In general memberOf will return all groups hierarchy so even if user is not directly assigned to administrators group but is member of other group that is added to administrators group you will get appropriate result.

To check user is admin

UserManager userManager = resourceResolver.adaptTo(UserManager.class);
User user = (User) userManager.getAuthorizable("myuser");
user.isAdmin(); // returns true if myuser is admin

To check user is part of administrative group

Group group = (Group) userManager.getAuthorizable("administrators");
group.isMember(user);// true if the Authorizable to test is a direct or indirect member

@akshaybhujbale  -

Check User belongs to which Group -> Check Group Permission  from User/Group Console to Identify.

https://experienceleague.adobe.com/docs/experience-manager-learn/cloud-service/accessing/aem-users-groups-and-permissions.html?lang=en

https://experienceleague.adobe.com/docs/experience-manager-65/administering/security/security.html?lang=en#built-in-users-and-groups

Configure user and group (Older version of AEM)

https://www.cqtutorial.com/courses/cq-admin/cq-admin-lessons/user-administration-and-security/configure-user-and-group-in-cq