The External API has a read-only users directory. It is useful for App Builder apps, org charts and integrations that need to know who is on your account.

Endpoints

  • GET /users returns the users on your account.
  • GET /users/{userId} returns one user, whatever their status. You get a 404 if the ID is unknown.

Filter by status

GET /users returns active users by default. Add ?status=inactive or ?status=all to change that. Any other value is rejected with a validation error. The list is not paginated. It is sorted by first name, then last name.

Fields returned

FieldMeaning
idUser ID
name, first_name, last_nameThe user's name
emailThe user's email address. It is null if the API token was created with the restrict-PII option.
roleThe user's main role
rolesNames of the user's permission groups
status1 means active. Any other value means inactive.
last_login_atLast login date and time

Passwords, one-time codes and API tokens are never returned.

Permissions

The API token's user needs the staff read permission. This is the same permission the in-app user directory needs to show emails. Without it, calls are refused.