---
title: "Get Client Users From Id Token"
method: GET
path: "/api/v1/users/self/client/users-from-id-token"
tags: ["User APIs", "users"]
---

# Get Client Users From Id Token

`GET /api/v1/users/self/client/users-from-id-token`

Return paginated users for the caller's client, authenticated via Okta ID token.

Accepts the Okta ID token in the Authorization Bearer header, allowing
integrations such as OpenBB workspace widgets to retrieve team members
without requiring a regular API key / Bearer token.

Note: require_permissions cannot be used here as a route dependency because
it internally calls get_user_from_token (regular JWT Bearer), which rejects
Okta ID tokens. The same permission gate is applied inline instead.

## Query parameters

- `page` integer
- `size` integer, nullable

## Response `200`

Successful Response

- PaginatedUsersRoleOnlyResponse
  - `total` integer, required
  - `items` UserInfoRoleOnly[], required
    - `id` string, uuid4, required
    - `email` string, required
    - `first_name` string, required
    - `last_name` string, required
    - `role` RolePreview, required
      - `id` string, uuid4, required
      - `name` string, required
      - `description` string, nullable
    - `is_active` boolean, required
  - `pages` integer, required
  - `page` integer, required
  - `size` integer, required

## Other responses

- `422` — Validation Error

---

[API](https://skmtc.net/carbonarc/apis/carbon-arc-client-admin-api.md) · [All operations](https://skmtc.net/carbonarc/apis/carbon-arc-client-admin-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/carbonarc/carbon-arc-client-admin-api/revisions/a8ca30023371/schema)