---
title: "Get administrator details"
method: GET
path: "/console/v1/admins/{globalAdminID}"
tags: ["Administrators"]
---

# Get administrator details

`GET /console/v1/admins/{globalAdminID}`

Returns the details of the specified administrator. 
 > 📘 **Note** 
 To use this API endpoint, enable the [Administrator API from Druva Cloud settings](/reference/administrators).

## Path parameters

- `globalAdminID` string, required

## Headers

- `Content-Type` 'application/json', required

## Response `200`

Success

- GetAdminResponse
  - `creator` string — The admin's email who created the specified admin
  - `productAccessControls` GetAdminResponseProductAccessControls[]
    - `accessControl` GetAdminResponseAccessControl[]
      - `resource` string — Resource can be Organization / Groups for Enterprise Workloads, or Workloads/Profiles/Legal Hold Types for Insync
      - `fullAccess` boolean — It describes whether the admin has full access to above specified resource or not
      - `collection` GetAdminResponseCollection[]
        - `fullAccess` boolean — It describes whether the admin has full access to above specified resource or not
        - `type` string — Type can be Groups / Sites for Enterprise Workloads, or Workloads/Profiles/Legal Hold Types for Insync
        - `itemList` Consolev1adminsProductAccessControlsItemList[]
          - `itemID` integer — Group id of the site the admin should be granted access
          - `itemName` string — Group name of the site the admin should be granted access
        - `name` string — The name of the site/organization or Workloads/Profiles/Legal Hold Types for which your admin has access
        - `collectionID` integer — The id of the site/organization or Workloads/Profiles/Legal Hold Types for which your admin has access
    - `product` string — The name of the licensed product
    - `roleDetailsURL` string — This url redirects you to the product page where it describes the role details for the admin
    - `description` string — Description of the role of that particular admin
    - `rights` GetAdminResponseRights1[] — These rights describe the functionalities of product should be accessible to admin. For example, it tells whether this admin is allowed to take backup of user data.
      - `category` string — Name of the category to which the rights depend or are listed under. Like - Backup And Restore Management - Server Management etc
      - `rights` GetAdminResponseRights[]
        - `right` string — Name of the right which is to be provided
        - `allotted` boolean — Is the above right mentioned allotted or not
    - `editAllowed` boolean — This describes that whether the admin has edit access or not
    - `role` string — This describes the role of the admin
    - `consoleRights` GetAdminResponseConsoleRights — Console rights define which functionalities of DCP console should be accessible to admin. For example, it tells whether this admin is allowed to create other admins using DCP UI.
      - `customer` GetAdminResponseConsoleRightsCustomer
        - `IPFencing` GetAdminResponseConsoleRightsCustomerIPFencing — The IPFencing policy empowers you to restrict access to the Druva Cloud Platform Console from outside your corporate network. It helps you control, monitor, and protect your data from unauthorized access from outside the organization.
          - `read` boolean — This describes whether read is allowed over IPFencing
          - `write` boolean — This describes whether write is allowed over IPFencing
        - `passwordPolicy` GetAdminResponseConsoleRightsCustomerPasswordPolicy — A Password Policy is a set of rules that encourage the use of strong passwords for ensuring added data security. inSync supports password policies for the users and administrators.
          - `read` boolean — This describes whether read is allowed over passwordPolicy
          - `write` boolean — This describes whether write is allowed over passwordPolicy
        - `SSOSettings` GetAdminResponseConsoleRightsCustomerSSOSettings — Single Sign-On (SSO) is a mechanism that allows users to access multiple resources using a single action of authentication and authorization.
          - `read` boolean — This describes whether read is allowed over SSOSettings
          - `write` boolean — This describes whether write is allowed over SSOSettings
      - `adminSelf` GetAdminResponseConsoleRightsAdminSelf
        - `name` GetAdminResponseConsoleRightsAdminSelfName — This is attribute of admin for displaying it's identity
          - `read` boolean — This describes whether read is allowed over name
          - `write` boolean — This describes whether write is allowed over name
        - `timeZone` GetAdminResponseConsoleRightsAdminSelfTimeZone — This is the timezone of the admin who has logged in or using the api
          - `read` boolean — This describes whether read is allowed over timeZone
          - `write` boolean — This describes whether write is allowed over timeZone
        - `country` GetAdminResponseConsoleRightsAdminSelfCountry — This is the country of the admin who has logged in or using the api
          - `read` boolean — This describes whether read is allowed over country
          - `write` boolean — This describes whether write is allowed over country
        - `changePassword` boolean — This describes whether the admin is allowed to change password or not
      - `adminOthers` GetAdminResponseConsoleRightsAdminOthers
        - `name` GetAdminResponseConsoleRightsAdminSelfName — This is attribute of admin for displaying it's identity
          - `read` boolean — This describes whether read is allowed over name
          - `write` boolean — This describes whether write is allowed over name
        - `timeZone` GetAdminResponseConsoleRightsAdminOthersTimeZone — This describes whether write is allowed over timeZone
          - `read` boolean — This describes whether read is allowed over timeZone
          - `write` boolean — This describes whether write is allowed over timeZone
        - `country` GetAdminResponseConsoleRightsAdminOthersCountry — This describes whether write is allowed over country
          - `read` boolean — This describes whether read is allowed over country
          - `write` boolean — This describes whether write is allowed over country
        - `role` GetAdminResponseConsoleRightsAdminOthersRole — This describes the role of logged admin whether he has rights to modify role of other admin or not
          - `read` boolean — This describes whether read is allowed over role
          - `write` boolean — This describes whether write is allowed over role
        - `passwordReset` boolean — This describes whether passwordReset is allowed or not
        - `createAdmin` boolean — This describes whether this admin is allowed to create a admin or not
        - `deleteAdmin` boolean — This describes whether this admin is allowed to delete a admin or not
    - `productId` integer — The unique ID of the licensed product
  - `timezone` string — The admin's timezone
  - `customerTimezone` string — The customer's timezone
  - `phoneNumber` string — The admin's phone number
  - `lastLoginTime` number, float — This is the readable time when last login was done
  - `customId` string — Null in case customId is not enabled for the customer
  - `email` string — The admin's email
  - `adGuid` string — The guid of AD created admin
  - `adminState` 'Active' | 'Disabled' — The admin's current state
  - `disabledOnTS` number, float — The epoch time when the admin was disabled.
  - `disabledThroughMode` string — The mode through which the admin was disabled(Applicable only if the Admin is in DISABLED state)
  - `provisioningMode` 'Manual' | 'AD_LDAP' — The mode through which the admin was created
  - `adMappingName` string — The mapping name for the AD created admin
  - `adMappingId` integer — The mapping ID for the AD created admin
  - `globalAdminId` string — The unique ID associated with the admin
  - `globalCustomerId` string — The unique ID associated with the customer
  - `allowPasswordIfSAML` boolean — For customer with SAML auth scheme
  - `lastLoginDevice` string — This is the Device/OS through which the last login was done
  - `nextPasswordChangeTime` number, float — Populated depending upon the max password age defined in the policy
  - `role` string — The role associated with the admin
  - `adminName` string — The name of the admin
  - `customerSFDCId` string[] — List of SFDC Ids
  - `ipAddress` string — This is the admin's current login IP address
  - `additionalProperties` GetAdminResponseAdditionalProperties
    - `customerName` string — The name of the customer to which the admin is associated
    - `allowedCustomerContextOperations` GetAdminResponseAdditionalPropertiesAllowedCustomerContextOperations — Depicts the admin permissions
      - `editAdmin` boolean
      - `resetPassword` boolean
      - `deleteAdmin` boolean
      - `changePassword` boolean
    - `accountDeletion` boolean — Always false
    - `deletionEpoch` number, float — The deletion epoch in case the admin is marked for deletion
    - `productIds` GetAdminResponseAdditionalPropertiesProductIds[]
      - `adminId` integer — The admin ID
      - `customerId` integer — The customer ID
      - `productId` integer — The unique ID of the associated product
    - `deletionTime` string — The deletion time in case the admin is marked for deletion. The time is in the UTC time zone. Example - 2024-01-04T09:06:02.191Z
    - `isReadOnly` boolean — True in case of MSP admin
    - `enableAlerts` boolean — True if alerts are enabled
    - `deploymentId` integer — The unique ID associated with AWS region
    - `customerAuthType` integer — The customer's authentication scheme. 1 - Password 2 - Saml Token
    - `accountUpgrade` boolean — Always false
    - `lastLoginEpoch` number, float — The admin's last login time in epoch
    - `rights` GetAdminResponseAdditionalPropertiesRights
      - `accountDetails` integer[] — List of product IDs populated
      - `adminManagement` integer[] — List of product IDs populated
    - `lastLoginIPAddress` string — This is the admin's last login IP address
    - `logoutURL` string
    - `lastLogin` string — The time at which the admin had previously logged-in. The time is in the UTC time zone. Example - 2024-01-04T09:06:02.191Z
    - `intercomUserHash` string — The intercom user hash generated for admin

## Other responses

- `400` — Bad Request
- `404` — The requested resource was not found.
- `500` — The request was not processed due to an internal error.

---

[API](https://skmtc.net/druva/apis/authentication.md) · [All operations](https://skmtc.net/druva/apis/authentication/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/druva/authentication/revisions/2af2bf148b25/schema)