How can we get a list of all users that have no access to a certain Workspace, or alternatively have no access to a certain Project?
Can we use WSAPI for that?
Such lists can not be constructed with a direct query. You will need to do some manipulation to get a list of users without access to a specific Workspace or Project.
The reason is that Agile Central stores permission information associating users with Workspaces or Projects. It doesn't store who does not have access. So, if User A has access to Workspace W1 then this piece of information is stored. But if User A does not have access to Workspace W2 then this information is not stored. If User A will try to access Workspace W2 they will not be able to access considering there is nothing explicit that grants them access.
What this means is that in order to compile a list of users who do not have access to a given Workspace or Project then you will need to subtract the users who do have access from the entire list of users of your subscription. This will leave you with the users without access to the Workspace/Project you need.
Here is how you get it all done:
Step 1: Find/Export all users of your subscription (how have access to any given space within your subscription).
A sub-admin can do that by using the Setup Area -> Users, then filtering on Subscription Permission != "No Access" . This will list all subscription users, which can then be exported to a CSV file or Excel Spreadsheet.
<Please see attached file for image>