API endpoint to remove profile pictures

[Jared Schmitt]

To stay GDPR compliant we need to remove profile pictures of former employees who still have a deactivated managed account. There is a button in the UI to remove the picture, but that doesn't scale.

Q: Is there a public API endpoint we can use to programmatically remove profile pictures?

[Darryl Lee · Accepted solution]

Couldn't find a public API endpoint. Atlassian has been somewhat ... slow, to implement such requests.

I did find the following endpoint, but it DOES NOT work with an Admin API Key. I found it during a logged in session to admin.atlassian.com, and for OCCASIONAL use, you could probably have a script the cloud.session.token cookie (YES THIS IS DANGEROUS) to do this in bulk:

An HTTP DELETE call made to the following URL was able to remove the avatar of a disabled user:

https://admin.atlassian.com/gateway/api/users/{USERID}/manage/avatar

As @Harrison Ponce correctly pointed out previously:

[Darryl Lee]

Hey @Jared Schmitt - wondering if you dared to try this unofficial API. :-}

[Jared Schmitt]

Thanks @Darryl Lee for pointing this out.

We will probably not go that route and instead just remove all inactive accounts, but it's good to know that there is a way if one needs it.

If only Atlassian could provide complete APIs...