Yandex Cloud
Search
Discuss with expertTry it for free
  • Customer Stories
  • Documentation
  • Blog
  • All Services
    • Cloud Interconnect
    • Cloud Backup
    • Cloud Registry
    • Yandex AI Studio
    • Compute Cloud
    • Object Storage
    • Managed Service for Kubernetes®
    • Yandex BareMetal
    • Smart Web Security
    • Security Deck
    • Managed Service for PostgreSQL
    • Managed Service for ClickHouse®
    • Monium
    • Cloud CDN
    • Network Load Balancer
    • Virtual Private Cloud
    • Cloud DNS
    • Application Load Balancer
    • Yandex Cloud Video
    • Stackland
    • Yandex Cloud Router
    • Yandex Managed Service for Trino
    • Managed Service for MySQL®
    • Managed Service for Valkey™
    • Managed Service for Apache Spark™
    • Yandex StoreDoc
    • Managed Service for OpenSearch
    • Managed Service for Apache Kafka®
    • Data Transfer
    • Yandex MPP Analytics Engine for PostgreSQL
    • Yandex Managed Service for Apache Airflow®
    • Data Processing
    • Yandex MetaData Hub
    • Managed Service for YDB
    • Managed Service for Sharded PostgreSQL
    • Managed Service for YTsaurus
    • Yandex WebSQL
    • DataLens
    • Yandex Search API
    • SpeechSense
    • SpeechKit
    • DataSphere
    • Vision OCR
    • Translate
    • Yandex Identity Hub
    • Key Management Service
    • Certificate Manager
    • Yandex Lockbox
    • Audit Trails
    • SmartCaptcha
    • Cloud Desktop
    • SourceCraft Code Assistant
    • Container Registry
    • Managed Service for GitLab
    • Managed Service for Prometheus®
    • Cloud Functions
    • API Gateway
    • Yandex Cloud Postbox
    • Message Queue
    • Serverless Integrations
    • IoT Core
    • Data Streams
    • Serverless Containers
    • Cloud Notification Service
    • Yandex Query
    • Identity and Access Management
    • Yandex Cloud Console
    • Resource Manager
    • Yandex Cloud Billing
    • Yandex Cloud Quota Manager
    • Cloud Apps
  • System Status
  • Marketplace
    • Featured
    • Infrastructure & Network
    • Data Platform
    • AI for business
    • Security
    • DevOps tools
    • Serverless
    • Monitoring & Resources
  • All Solutions
    • By industry
    • By use case
    • Economics and Pricing
    • Security
    • Technical Support
    • Start testing with double trial credits
    • Cloud credits to scale your IT product
    • Gateway to Russia
    • Cloud for Startups
    • Center for Technologies and Society
    • Yandex Cloud Partner program
    • Price calculator
    • Pricing plans
  • Customer Stories
  • Documentation
  • Blog
© 2026 Direct Cursus Technology L.L.C.
Yandex Identity Hub
  • Access management
  • Pricing policy
  • Terraform reference
    • Authentication
      • Overview
        • Overview
          • Overview
          • Get
          • List
          • Create
          • Update
          • Delete
          • SetOwnPassword
          • SetOthersPassword
          • Suspend
          • Reactivate
          • GeneratePassword
          • GetSelfPasswordMetadata
          • ConvertToExternal
          • SetPasswordHash
          • ResolveExternalIds
          • GetPasswordChanges
          • CommitPassword
  • Audit Trails events
  • Release notes
  • Yandex Identity Hub Sync Agent release notes

In this article:

  • gRPC request
  • GetPasswordChangesRequest
  • GetPasswordChangesResponse
  1. API reference
  2. gRPC
  3. Identity Provider API
  4. User
  5. GetPasswordChanges

Identity Provider API, gRPC: UserService.GetPasswordChanges

Written by
Yandex Cloud
Updated at June 23, 2026
View in Markdown
  • gRPC request
  • GetPasswordChangesRequest
  • GetPasswordChangesResponse

Streams password changes for a IdentityHub sync agent to process.

gRPC requestgRPC request

rpc GetPasswordChanges (stream GetPasswordChangesRequest) returns (stream GetPasswordChangesResponse)

GetPasswordChangesRequestGetPasswordChangesRequest

{
  "userpool_id": "string",
  "agent_id": "string",
  "offset": "int64"
}

Request from a IdentityHub sync agent to receive pending password changes.

Field

Description

userpool_id

string

Required field. ID of the userpool to receive password changes for.

The maximum string length in characters is 50.

agent_id

string

Required field. ID of the IdentityHub sync agent.

The maximum string length in characters is 50.

offset

int64

Offset of the last successfully processed change.

GetPasswordChangesResponseGetPasswordChangesResponse

{
  "external_user_id": "string",
  "password": "string",
  "modifying_operation_id": "string",
  "need_change": "bool",
  "offset": "int64",
  "expires_at": "google.protobuf.Timestamp",
  "operation_expires_at": "google.protobuf.Timestamp",
  "generated": "bool",
  "old_password": "string"
}

A pending password change to be processed by a IdentityHub sync agent.

Field

Description

external_user_id

string

External identifier of the user whose password changed.

password

string

The new password to write back to the directory.

modifying_operation_id

string

ID of the operation that triggered this password change.

need_change

bool

Whether the user must change their password on next login.

offset

int64

Offset of this change in the stream.

expires_at

google.protobuf.Timestamp

Timestamp when the password expires.

operation_expires_at

google.protobuf.Timestamp

Timestamp when the writeback operation expires.

generated

bool

Whether the password was system-generated.

old_password

string

The user's previous password. Present only for user-initiated changes
(empty for administrative resets and system-generated passwords). It lets
the sync agent perform a policy-enforcing change (LDAP DELETE old + ADD new)
instead of a reset (REPLACE), so the directory enforces minimum password
age and password history.

Was the article helpful?

Previous
ResolveExternalIds
Next
CommitPassword
© 2026 Direct Cursus Technology L.L.C.