Yandex Cloud
Search
Discuss with expertTry it for free
  • Customer Stories
  • Documentation
  • Blog
  • All Services
  • System Status
  • Marketplace
    • Featured
    • Infrastructure & Network
    • Data Platform
    • AI for business
    • Security
    • DevOps tools
    • Serverless
    • Monitoring & Resources
  • All Solutions
    • By industry
    • By use case
    • Economics and Pricing
    • Security
    • Technical Support
    • Start testing with double trial credits
    • Cloud credits to scale your IT product
    • Gateway to Russia
    • Cloud for Startups
    • Center for Technologies and Society
    • Yandex Cloud Partner program
    • Price calculator
    • Pricing plans
  • Customer Stories
  • Documentation
  • Blog
© 2026 Direct Cursus Technology L.L.C.
Yandex Identity Hub
  • Access management
  • Pricing policy
  • Terraform reference
    • Authentication
      • Overview
        • Overview
          • Overview
          • Get
          • List
          • Create
          • Update
          • Delete
          • SetOwnPassword
          • SetOthersPassword
          • Suspend
          • Reactivate
          • GeneratePassword
          • GetSelfPasswordMetadata
          • ConvertToExternal
          • SetPasswordHash
          • ResolveExternalIds
          • GetPasswordChanges
          • CommitPassword
  • Audit Trails events
  • Release notes
  • Yandex Identity Hub Sync Agent release notes

In this article:

  • gRPC request
  • GetPasswordChangesRequest
  • GetPasswordChangesResponse
  1. API reference
  2. gRPC
  3. Identity Provider API
  4. User
  5. GetPasswordChanges

Identity Provider API, gRPC: UserService.GetPasswordChanges

Written by
Yandex Cloud
Updated at May 27, 2026
  • gRPC request
  • GetPasswordChangesRequest
  • GetPasswordChangesResponse

Streams password changes for a IdentityHub sync agent to process.

gRPC requestgRPC request

rpc GetPasswordChanges (stream GetPasswordChangesRequest) returns (stream GetPasswordChangesResponse)

GetPasswordChangesRequestGetPasswordChangesRequest

{
  "userpool_id": "string",
  "agent_id": "string",
  "offset": "int64"
}

Request from a IdentityHub sync agent to receive pending password changes.

Field

Description

userpool_id

string

Required field. ID of the userpool to receive password changes for.

The maximum string length in characters is 50.

agent_id

string

Required field. ID of the IdentityHub sync agent.

The maximum string length in characters is 50.

offset

int64

Offset of the last successfully processed change.

GetPasswordChangesResponseGetPasswordChangesResponse

{
  "external_user_id": "string",
  "password": "string",
  "modifying_operation_id": "string",
  "need_change": "bool",
  "offset": "int64",
  "expires_at": "google.protobuf.Timestamp",
  "operation_expires_at": "google.protobuf.Timestamp",
  "generated": "bool"
}

A pending password change to be processed by a IdentityHub sync agent.

Field

Description

external_user_id

string

External identifier of the user whose password changed.

password

string

The new password to write back to the directory.

modifying_operation_id

string

ID of the operation that triggered this password change.

need_change

bool

Whether the user must change their password on next login.

offset

int64

Offset of this change in the stream.

expires_at

google.protobuf.Timestamp

Timestamp when the password expires.

operation_expires_at

google.protobuf.Timestamp

Timestamp when the writeback operation expires.

generated

bool

Whether the password was system-generated.

Was the article helpful?

Previous
ResolveExternalIds
Next
CommitPassword
© 2026 Direct Cursus Technology L.L.C.