Distinguishing Registered/Logged-In Users from All CorpUser Records in DataHub Cloud – DataHub Customer Support Portal

Area: Product Issues

Sub-Area: User Management & Identity

Issue

Users navigating to the DataHub Cloud search page filtered by CORP_USER (e.g., https://<your-instance>.acryl.io/search?filter_entity=CORP_USER) may assume they are viewing a complete list of registered, logged-in human user accounts. In reality, this page returns all CorpUser entities stored in the DataHub metadata graph, which includes automatically ingested records such as shared mailboxes, distribution lists, and system/service accounts that appear as asset owners in connected source systems — not just users who have actively signed in to DataHub Cloud.

You Might Be Asking

Does the CorpUser search page show all registered users in my DataHub Cloud environment?
Why does the user search page show more accounts than I expect?
Where can I find the list of users who have actually logged in to DataHub Cloud?
What is the difference between a CorpUser entity and a registered DataHub user?
Are service accounts and mailboxes included in the CORP_USER search results?

Solution

Understand what the CorpUser search page shows.
The URL https://<your-instance>.acryl.io/search?filter_entity=CORP_USER displays every CorpUser entity in the DataHub metadata graph. This includes:
- Human users who have signed in via SSO or direct login.
- CorpUser records automatically created during metadata ingestion — for example, shared mailboxes, distribution lists, or any identity that appears as an asset owner in a connected source system.
- System accounts (note: dedicated service accounts with the SERVICE_ACCOUNT type are excluded by a hardcoded filter in DataHub's search resolver and will not appear here).
Soft-deleted users (marked with status.removed = true) are also excluded from results by default.
Use Settings > Users & Groups to view actual registered users.
To see only the users who have been provisioned or have signed in to your DataHub Cloud instance — along with their status, assigned role, and invite state — navigate to:
```
Settings > Users & Groups
```
Access Settings from the bottom-left navigation of the DataHub Cloud home page. The Users & Groups page provides:
- Account status (Active, Invited, Suspended, etc.)
- Assigned DataHub role
- Invite state
- Filter controls to display only active users
This is the authoritative view for human accounts that have interacted with your DataHub Cloud environment and is distinct from the broader CorpUser entity list.

View complete metadata for an individual user.

The search results page shows only summary-level profile information (display name, email, title). To see the full metadata for a specific user — including group memberships, roles, editable properties, and custom tags — either click through to the individual user's profile page in the UI, or query the GraphQL API:

query {
  corpUser(urn: "urn:li:corpuser:<username>") {
    urn
    username
    properties {
      displayName
      email
      title
    }
    editableProperties {
      displayName
      title
      bio
    }
    relationships(
      input: { types: ["IsMemberOfGroup"], direction: OUTGOING, start: 0, count: 10 }
    ) {
      relationships {
        entity {
          urn
        }
      }
    }
  }
}

Retrieve all CorpUser entities programmatically (if needed for audit or export).
If you need a definitive count or export of all CorpUser entities — including those created from ingestion — use the DataHub GraphQL API or the Entities REST API with appropriate filters. The following GraphQL example lists CorpUser entities with pagination:
```
query {
  search(
    input: {
      type: CORP_USER,
      query: "*",
      start: 0,
      count: 100
    }
  ) {
    total
    searchResults {
      entity {
        urn
        ... on CorpUser {
          username
          properties {
            displayName
            email
          }
        }
      }
    }
  }
}
```
Paginate through results by incrementing the start value in multiples of count until you have retrieved all total records.

Additional Notes

The exclusion of SERVICE_ACCOUNT-type users from CorpUser search results is intentional, hardcoded behavior in DataHub's SearchUsersResolver. A typeNames != SERVICE_ACCOUNT filter is automatically applied to every CORP_USER search query, regardless of any UI filters you apply — this cannot be overridden from the search UI. Additionally, the total result count displayed at the top of the search page is accurate even when results span multiple pages; paginate through all pages to view all records. If you need to distinguish ingested CorpUser records (e.g., mailboxes and distribution lists) from human sign-in accounts, the Settings > Users & Groups page is the most reliable source for that distinction within the DataHub Cloud UI.

Issue

You Might Be Asking

Solution

Additional Notes

Related Documentation