Q. I’m a project admin for a Glue project. Using company_roster REST call, I can get a list of users who are in other projects and not necessarily in my project. Is this intended behavior?
A. Yes, this is the way it is designed. The primary reason is that the company roster API is required when a project admin would be adding a new user to a project. If they cannot see the entire company roster list, it would be impossible to add people to a project that weren’t already on one of their existing projects.
This is the same for host admin. If you are full member, you will not see the list as you do not have a right to add members.
Related to this, if you see a member with no name, this person has not accepted the invitation, yet.