---
title: "GET /users/{InstanceId}/{UserId}"
method: GET
path: "/users/{InstanceId}/{UserId}"
---

# GET /users/{InstanceId}/{UserId}

`GET /users/{InstanceId}/{UserId}`

Describes the specified user account. You can <a href="https://docs.aws.amazon.com/connect/latest/adminguide/find-instance-arn.html">find the instance ID in the Amazon Connect console</a> (it’s the final part of the ARN). The console does not display the user IDs. Instead, list the users and note the IDs provided in the output.

## Path parameters

- `UserId` string, required
- `InstanceId` string, required

## Response `200`

Success

- DescribeUserResponse
  - `User` object — Information about the user account and configuration settings.
    - `Id` string — The identifier of the user account.
    - `Arn` string — The Amazon Resource Name (ARN) of the user account.
    - `Username` string — The user name assigned to the user account.
    - `IdentityInfo` object — Information about the user identity.
      - `FirstName` string — The first name. This is required if you are using Amazon Connect or SAML for identity management.
      - `LastName` string — The last name. This is required if you are using Amazon Connect or SAML for identity management.
      - `Email` string — The email address. If you are using SAML for identity management and include this parameter, an error is returned.
      - `SecondaryEmail` string — <p>The user's secondary email address. If you provide a secondary email, the user receives email notifications - other than password reset notifications - to this email address instead of to their primary email address.</p> <p>Pattern: <code>(?=^.{0,265}$)[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,63}</code> </p>
      - `Mobile` string — The user's mobile number.
    - `PhoneConfig` object — Information about the phone configuration for the user.
      - `PhoneType` 'SOFT_PHONE' | 'DESK_PHONE', required — The phone type.
      - `AutoAccept` boolean — The Auto accept setting.
      - `AfterContactWorkTimeLimit` integer — <p>The After Call Work (ACW) timeout setting, in seconds.</p> <note> <p>When returned by a <code>SearchUsers</code> call, <code>AfterContactWorkTimeLimit</code> is returned in milliseconds. </p> </note>
      - `DeskPhoneNumber` string — The phone number for the user's desk phone.
    - `DirectoryUserId` string — The identifier of the user account in the directory used for identity management.
    - `SecurityProfileIds` SecurityProfileId[] — The identifiers of the security profiles for the user.
    - `RoutingProfileId` string — The identifier of the routing profile for the user.
    - `HierarchyGroupId` string — The identifier of the hierarchy group for the user.
    - `Tags` object — The tags.

## Other responses

- `480` — InvalidRequestException
- `481` — InvalidParameterException
- `482` — ResourceNotFoundException
- `483` — ThrottlingException
- `484` — InternalServiceException

---

[API](https://skmtc.net/aws/apis/connect.md) · [All operations](https://skmtc.net/aws/apis/connect/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/connect/versions/fbcf0a4faed2/schema)