Returns a paginated list of users associated with offerings. The visibility of users depends on the role of the authenticated user. Staff and support can see all users. Service providers can see users of their offerings if the user has consented. Regular users can only see their own offering-user records.
Whether the offering user should be restricted from accessing resources
200 - No response body
Update runtime state
Allows a service provider to set the operational/access state of an offering user. Unlike the lifecycle state, this can be updated at any time (except when the account is Deleted). Use this to signal access blockers such as pending Terms of Use acceptance or pending account linking (e.g. MyAccessID). Optionally include service_provider_comment and service_provider_comment_url to explain the change to the user in the same request.
Company registration code of the user's organization, if known
user_organization_vat_code
string
VAT code of the user's organization
user_organization_address
string
Postal address of the user's organization
user_eduperson_assurance
array of strings
REFEDS assurance profile URIs from identity provider
user_civil_number
string
user_birth_date
string (date)
user_identity_source
string
Indicates what identity provider was used.
user_uid_number
integer (int64)
POSIX UID from the identity provider; used when an offering's uid_source is 'user_attribute'.
user_primary_gid
integer (int64)
POSIX primary GID from the identity provider; used when an offering's gid_source is 'user_attribute'.
user_active_isds
array of strings
List of ISDs that have asserted this user exists. User is deactivated when this becomes empty.
created
string (date-time)
modified
string (date-time)
customer_uuid
string (uuid)
customer_name
string
is_restricted
boolean
Signal to service if the user account is restricted or not
state
any
runtime_state
any
service_provider_comment
string
Additional comment for pending states like validation or account linking
service_provider_comment_url
string (uri)
URL link for additional information or actions related to service provider comment
has_consent
boolean
Check if the user has active consent for this offering.
requires_reconsent
boolean
Check if the user needs to re-consent due to ToS changes.
offering_has_active_tos
boolean
has_compliance_checklist
boolean
Check if the offering user has a connected compliance checklist completion.
consent_data
object (free-form)
User consent data including uuid, version, and agreement_date
is_profile_complete
boolean
missing_profile_attributes
array of strings
uidnumber
integer
primarygroup
integer
login_shell
string
home_directory
string
Update service provider comments
Allows a service provider to update the service_provider_comment and service_provider_comment_url fields for an offering user. This is often used to provide feedback or instructions during a pending state.
If true, returns all questions including hidden ones (for dynamic form visibility). Default: false.
200 -
Field
Type
Description
checklist
any
completion
object
completion.uuid
string (uuid)
completion.is_completed
boolean
Whether all required questions have been answered
completion.completion_percentage
number (double)
completion.unanswered_required_questions
array of anys
completion.checklist_name
string
completion.checklist_description
string
completion.created
string (date-time)
completion.modified
string (date-time)
questions
array of objects
questions.uuid
string (uuid)
questions.description
string
questions.user_guidance
string
questions.question_type
any
Type of question and expected answer format
questions.required
boolean
questions.order
integer
questions.existing_answer
any
questions.question_options
array of anys
questions.min_value
string (decimal)
Minimum value allowed for NUMBER, YEAR, and RATING type questions
questions.max_value
string (decimal)
Maximum value allowed for NUMBER, YEAR, and RATING type questions
questions.allowed_file_types
object (free-form)
List of allowed file extensions (e.g., ['.pdf', '.doc', '.docx']). If empty, all file types are allowed.
questions.allowed_mime_types
object (free-form)
List of allowed MIME types (e.g., ['application/pdf', 'application/msword']). If empty, MIME type validation is not enforced. When both extensions and MIME types are specified, files must match both criteria for security.
questions.max_file_size_mb
integer
Maximum file size in megabytes. If not set, no size limit is enforced.
questions.max_files_count
integer
Maximum number of files allowed for MULTIPLE_FILES type questions. If not set, no count limit is enforced.
questions.likert_scale_length
any
Number of points on the Likert scale (3, 5, or 7). Required for LIKERT type questions.
questions.likert_low_label
string
Label for the lowest point on the Likert scale (e.g. 'Strongly disagree'). Optional.
questions.likert_high_label
string
Label for the highest point on the Likert scale (e.g. 'Strongly agree'). Optional.
questions.likert_allow_na
boolean
Allow respondents to choose 'N/A' as an answer for LIKERT type questions.
questions.rich_text_char_limit
integer
Maximum number of characters allowed in RICH_TEXT type answers. If not set, no limit is enforced.
questions.rich_text_toolbar_level
any
Toolbar level for the rich text editor: 'minimal', 'standard', or 'extended'.
questions.dependencies_info
any
400 -
404 -
Checklist review
Get checklist with questions and existing answers including review logic (reviewers only).
Minimum value allowed for NUMBER, YEAR, and RATING type questions
questions.max_value
string (decimal)
Maximum value allowed for NUMBER, YEAR, and RATING type questions
questions.allowed_file_types
object (free-form)
List of allowed file extensions (e.g., ['.pdf', '.doc', '.docx']). If empty, all file types are allowed.
questions.allowed_mime_types
object (free-form)
List of allowed MIME types (e.g., ['application/pdf', 'application/msword']). If empty, MIME type validation is not enforced. When both extensions and MIME types are specified, files must match both criteria for security.
questions.max_file_size_mb
integer
Maximum file size in megabytes. If not set, no size limit is enforced.
questions.max_files_count
integer
Maximum number of files allowed for MULTIPLE_FILES type questions. If not set, no count limit is enforced.
questions.likert_scale_length
any
Number of points on the Likert scale (3, 5, or 7). Required for LIKERT type questions.
questions.likert_low_label
string
Label for the lowest point on the Likert scale (e.g. 'Strongly disagree'). Optional.
questions.likert_high_label
string
Label for the highest point on the Likert scale (e.g. 'Strongly agree'). Optional.
questions.likert_allow_na
boolean
Allow respondents to choose 'N/A' as an answer for LIKERT type questions.
questions.rich_text_char_limit
integer
Maximum number of characters allowed in RICH_TEXT type answers. If not set, no limit is enforced.
questions.rich_text_toolbar_level
any
Toolbar level for the rich text editor: 'minimal', 'standard', or 'extended'.
questions.dependencies_info
any
questions.operator
any
questions.review_answer_value
any
questions.always_requires_review
boolean
This question always requires review regardless of answer
List POSIX UID/GID allocations of an offering user
Returns the user's POSIX identifiers (UID, primary GID) and, for each, the POSIX ID pool that tracks it. The pool fields are null when the value is not tracked by a pool.
Search by offering name, username, user name, UID or primary GID
runtime_state
array
Offering user runtime state
state
array
Offering user state
user_username
string
User username
user_uuid
string (uuid)
User UUID
200 -
The response body is an array of objects, where each object has the following structure:
Field
Type
gid
integer
offering_name
string
project_name
string
project_uuid
string
customer_name
string
customer_uuid
string
project_accessible
boolean
pool_uuid
string
List a user's POSIX identities across all their offerings
Consolidated view of one user's POSIX identifiers (UID, primary GID and project group GIDs) across every offering they have an account on, each with the range it was allocated from. Scoped to the offering users the requester is allowed to see.
Search by offering name, username, user name, UID or primary GID
runtime_state
array
Offering user runtime state
state
array
Offering user state
user_username
string
User username
user_uuid
string (uuid)
✓
200 -
The response body is an array of objects, where each object has the following structure:
Field
Type
offering_name
string
offering_uuid
string
namespace
string
value
integer
context
string
pool_uuid
string
Get profile field warnings
Returns a mapping of user profile field names to offerings that expose those fields. When ENFORCE_OFFERING_USER_PROFILE_COMPLETENESS is enabled, clearing a field listed here would make the user invisible to the service provider for the associated offerings.
Transitions the offering user state from 'Requested' or 'Error Creating' to 'Creating'. This is typically used by an agent to signal that the creation process has started.
URL reference related to the state transition comment
200 - No response body
Set POSIX attributes for an offering user
Override the login shell, home directory, UID and/or primary GID for a single offering user, taking precedence over the offering-level defaults / the range allocator. This is the programmatic equivalent of the 'Edit POSIX attributes' dialog. The accepted fields are 'login_shell', 'home_directory', 'uidnumber' and 'primarygroup'; all are optional, but at least one must be provided.
A UID or primary GID re-points the allocation ledger and must fall within the POSIX ID pool resolved for the offering: a value outside that pool's range is rejected with 400, as is a value already held by another active identity (another account, a robot account or a group) and any override on an offering for which no pool resolves. The action is all-or-nothing - a conflict on the second identifier rolls back the change made for the first.
The response 'warnings' list carries only non-fatal advisories about values that were accepted: the reserved POSIX ids 65534 and 65535, and values of 2^31 or above, which may break software using signed 32-bit ids.
Home directory for this account (LDAP homeDirectory).
uidnumber
integer (int64)
Override the account's UID. The value must fall within the offering's resolved POSIX ID pool and is rejected with 400 if it is out of range or already held by another active identity.
primarygroup
integer (int64)
Override the account's primary GID, under the same pool-range and uniqueness rules as uidnumber.
200 -
Field
Type
Description
uidnumber
integer
The UID now stored for the account.
primarygroup
integer
The primary GID now stored for the account.
warnings
array of strings
Non-fatal advisories about the accepted values: a reserved POSIX id (65534 or 65535) or a value of 2^31 or above. Out-of-range and already-allocated values are rejected with 400 instead.
Set state to Validation Complete
Transitions the state from a pending validation state to 'OK', indicating that the user has completed the required steps. This clears any service provider comments.