A User represents an individual person's account within the system. It is the primary entity for authentication and identity.
A User object on its own has limited capabilities beyond logging in and managing personal details like SSH keys. Its power comes from the roles and permissions it is granted within the scope of a Customer or Project.
User vs. Permissions
It is crucial to distinguish between the User entity and its permissions. The User API allows for managing the account itself (e.g., name, email), while team management is handled through the add_user actions on the Customer and Project endpoints.
List of ISD source identifiers this user can manage via Identity Bridge. E.g., ['isd:puhuri', 'isd:fenix']. Non-empty list implies identity manager role.
active_isds
any
List of ISDs that have asserted this user exists. User is deactivated when this becomes empty.
List of ISD source identifiers this user can manage via Identity Bridge. E.g., ['isd:puhuri', 'isd:fenix']. Non-empty list implies identity manager role.
active_isds
any
List of ISDs that have asserted this user exists. User is deactivated when this becomes empty.
Company registration code of the user's organization, if known
eduperson_assurance
any
REFEDS assurance profile URIs from identity provider
is_identity_manager
boolean
Designates whether the user is allowed to manage remote user identities.
managed_isds
any
List of ISD source identifiers this user can manage via Identity Bridge. E.g., ['isd:puhuri', 'isd:fenix']. Non-empty list implies identity manager role.
201 -
Field
Type
Description
url
string (uri)
uuid
string (uuid)
username
string
Required. 128 characters or fewer. Lowercase letters, numbers and @/./+/-/_ characters
slug
string
URL-friendly identifier. Only editable by staff users.
full_name
string
native_name
string
job_title
string
email
string (email)
phone_number
string
organization
string
civil_number
string
description
string
is_staff
boolean
Designates whether the user can log into this admin site.
is_active
boolean
Designates whether this user should be treated as active. Unselect this instead of deleting accounts.
is_support
boolean
Designates whether the user is a global support user.
token
string
token_lifetime
integer
Token lifetime in seconds.
token_expires_at
string (date-time)
registration_method
string
Indicates what registration method was used.
date_joined
string (date-time)
agreement_date
string (date-time)
Indicates when the user has agreed with the policy.
notifications_enabled
boolean
Designates whether the user is allowed to receive email notifications.
preferred_language
string
permissions
array of objects
permissions.user_uuid
string (uuid)
permissions.user_name
string
permissions.user_slug
string
permissions.created
string (date-time)
permissions.expiration_time
string (date-time)
permissions.created_by_full_name
string
permissions.created_by_username
string
permissions.role_name
string
permissions.role_description
string
permissions.role_uuid
string (uuid)
permissions.scope_type
string
permissions.scope_uuid
string (uuid)
permissions.scope_name
string
permissions.customer_uuid
string (uuid)
permissions.customer_name
string
requested_email
string
affiliations
any
Person's affiliation within organization such as student, faculty, staff.
first_name
string
last_name
string
birth_date
string (date)
identity_provider_name
string
identity_provider_label
string
identity_provider_management_url
string
identity_provider_fields
array of strings
image
string (uri)
identity_source
string
Indicates what identity provider was used.
has_active_session
boolean
has_usable_password
boolean
ip_address
string
gender
any
ISO 5218 gender code
personal_title
string
Honorific title (Mr, Ms, Dr, Prof, etc.)
place_of_birth
string
country_of_residence
string
nationality
string
Primary citizenship (ISO 3166-1 alpha-2 code)
nationalities
any
List of all citizenships (ISO 3166-1 alpha-2 codes)
List of ISD source identifiers this user can manage via Identity Bridge. E.g., ['isd:puhuri', 'isd:fenix']. Non-empty list implies identity manager role.
active_isds
any
List of ISDs that have asserted this user exists. User is deactivated when this becomes empty.
Company registration code of the user's organization, if known
eduperson_assurance
any
REFEDS assurance profile URIs from identity provider
is_identity_manager
boolean
Designates whether the user is allowed to manage remote user identities.
managed_isds
any
List of ISD source identifiers this user can manage via Identity Bridge. E.g., ['isd:puhuri', 'isd:fenix']. Non-empty list implies identity manager role.
200 -
Field
Type
Description
url
string (uri)
uuid
string (uuid)
username
string
Required. 128 characters or fewer. Lowercase letters, numbers and @/./+/-/_ characters
slug
string
URL-friendly identifier. Only editable by staff users.
full_name
string
native_name
string
job_title
string
email
string (email)
phone_number
string
organization
string
civil_number
string
description
string
is_staff
boolean
Designates whether the user can log into this admin site.
is_active
boolean
Designates whether this user should be treated as active. Unselect this instead of deleting accounts.
is_support
boolean
Designates whether the user is a global support user.
token
string
token_lifetime
integer
Token lifetime in seconds.
token_expires_at
string (date-time)
registration_method
string
Indicates what registration method was used.
date_joined
string (date-time)
agreement_date
string (date-time)
Indicates when the user has agreed with the policy.
notifications_enabled
boolean
Designates whether the user is allowed to receive email notifications.
preferred_language
string
permissions
array of objects
permissions.user_uuid
string (uuid)
permissions.user_name
string
permissions.user_slug
string
permissions.created
string (date-time)
permissions.expiration_time
string (date-time)
permissions.created_by_full_name
string
permissions.created_by_username
string
permissions.role_name
string
permissions.role_description
string
permissions.role_uuid
string (uuid)
permissions.scope_type
string
permissions.scope_uuid
string (uuid)
permissions.scope_name
string
permissions.customer_uuid
string (uuid)
permissions.customer_name
string
requested_email
string
affiliations
any
Person's affiliation within organization such as student, faculty, staff.
first_name
string
last_name
string
birth_date
string (date)
identity_provider_name
string
identity_provider_label
string
identity_provider_management_url
string
identity_provider_fields
array of strings
image
string (uri)
identity_source
string
Indicates what identity provider was used.
has_active_session
boolean
has_usable_password
boolean
ip_address
string
gender
any
ISO 5218 gender code
personal_title
string
Honorific title (Mr, Ms, Dr, Prof, etc.)
place_of_birth
string
country_of_residence
string
nationality
string
Primary citizenship (ISO 3166-1 alpha-2 code)
nationalities
any
List of all citizenships (ISO 3166-1 alpha-2 codes)
List of ISD source identifiers this user can manage via Identity Bridge. E.g., ['isd:puhuri', 'isd:fenix']. Non-empty list implies identity manager role.
active_isds
any
List of ISDs that have asserted this user exists. User is deactivated when this becomes empty.
Company registration code of the user's organization, if known
eduperson_assurance
any
REFEDS assurance profile URIs from identity provider
is_identity_manager
boolean
Designates whether the user is allowed to manage remote user identities.
managed_isds
any
List of ISD source identifiers this user can manage via Identity Bridge. E.g., ['isd:puhuri', 'isd:fenix']. Non-empty list implies identity manager role.
200 -
Field
Type
Description
url
string (uri)
uuid
string (uuid)
username
string
Required. 128 characters or fewer. Lowercase letters, numbers and @/./+/-/_ characters
slug
string
URL-friendly identifier. Only editable by staff users.
full_name
string
native_name
string
job_title
string
email
string (email)
phone_number
string
organization
string
civil_number
string
description
string
is_staff
boolean
Designates whether the user can log into this admin site.
is_active
boolean
Designates whether this user should be treated as active. Unselect this instead of deleting accounts.
is_support
boolean
Designates whether the user is a global support user.
token
string
token_lifetime
integer
Token lifetime in seconds.
token_expires_at
string (date-time)
registration_method
string
Indicates what registration method was used.
date_joined
string (date-time)
agreement_date
string (date-time)
Indicates when the user has agreed with the policy.
notifications_enabled
boolean
Designates whether the user is allowed to receive email notifications.
preferred_language
string
permissions
array of objects
permissions.user_uuid
string (uuid)
permissions.user_name
string
permissions.user_slug
string
permissions.created
string (date-time)
permissions.expiration_time
string (date-time)
permissions.created_by_full_name
string
permissions.created_by_username
string
permissions.role_name
string
permissions.role_description
string
permissions.role_uuid
string (uuid)
permissions.scope_type
string
permissions.scope_uuid
string (uuid)
permissions.scope_name
string
permissions.customer_uuid
string (uuid)
permissions.customer_name
string
requested_email
string
affiliations
any
Person's affiliation within organization such as student, faculty, staff.
first_name
string
last_name
string
birth_date
string (date)
identity_provider_name
string
identity_provider_label
string
identity_provider_management_url
string
identity_provider_fields
array of strings
image
string (uri)
identity_source
string
Indicates what identity provider was used.
has_active_session
boolean
has_usable_password
boolean
ip_address
string
gender
any
ISO 5218 gender code
personal_title
string
Honorific title (Mr, Ms, Dr, Prof, etc.)
place_of_birth
string
country_of_residence
string
nationality
string
Primary citizenship (ISO 3166-1 alpha-2 code)
nationalities
any
List of all citizenships (ISO 3166-1 alpha-2 codes)
List of ISD source identifiers this user can manage via Identity Bridge. E.g., ['isd:puhuri', 'isd:fenix']. Non-empty list implies identity manager role.
active_isds
any
List of ISDs that have asserted this user exists. User is deactivated when this becomes empty.
Shows historical log of who has accessed the user's profile data. Regular users see anonymized accessor categories. Staff/support see full details including accessor identity, IP, and context.
Shows who has access to the user's profile data. Includes administrative access (staff/support), organizational access (same customer/project), and service provider access (via consent). Regular users see counts for admin access; staff/support see individual records.
Filter versions created after this timestamp (ISO 8601)
created_before
string
Filter versions created before this timestamp (ISO 8601)
customer_uuid
string (uuid)
Customer UUID
date_joined
string (date-time)
Date joined after
description
string
email
string
Email
full_name
string
Full name
is_active
boolean
Is active
is_staff
boolean
Is staff
is_support
boolean
Is support
job_title
string
Job title
modified
string (date-time)
Date modified after
native_name
string
Native name
o
array
Ordering
organization
string
Organization
organization_roles
string
Organization roles
page
integer
A page number within the paginated result set.
page_size
integer
Number of results to return per page.
phone_number
string
project_roles
string
Project roles
project_uuid
string (uuid)
Project UUID
query
string
Filter by first name, last name, civil number, username or email
registration_method
string
user_keyword
string
User keyword
username
string
Username (exact)
username_list
string
Comma-separated usernames
200 -
The response body is an array of objects, where each object has the following structure:
Field
Type
Description
id
integer
Version ID
revision_date
string (date-time)
When this revision was created
revision_user
object (free-form)
User who created this revision
revision_comment
string
Comment describing the revision
serialized_data
object (free-form)
Serialized model fields at this revision
Get identity bridge status for a user
Returns diagnostic information about a user's identity bridge state: active ISDs, per-attribute source tracking with staleness detection, and effective bridge-writable fields. Staff only.
List of ISD source identifiers this user can manage via Identity Bridge. E.g., ['isd:puhuri', 'isd:fenix']. Non-empty list implies identity manager role.
active_isds
any
List of ISDs that have asserted this user exists. User is deactivated when this becomes empty.
Check profile completeness
Check if user profile is complete with all mandatory attributes.