Get User Information

Retrieves the full profile and account details for a specific user by their integer user ID.

Use this endpoint to look up an individual tenant member's role, group assignments, account status, and EMM linkage without fetching the full user list.

About Get User Information

This endpoint returns a single user record from the authenticated enterprise, identified by their integer user_id. The response uses the same User schema returned by GET /user/, covering identity, role, group memberships, active status, and EMM association. Note that other methods at this path — PUT, PATCH, and DELETE — are tagged User (Deprecated); for updating a user's role use PUT /authz2/v1/users/{user_id}, and for removing a user use DELETE /authn2/v0/tenant/{enterprise_id}/user/{user_id}/.

Key Fields (Response)

id — the integer user ID (matches the path parameter)

username — the user's login identifier

email — the user's email address

profile.role — assigned role within the enterprise (Enterprise Admin, Viewer, Group Admin, Group Viewer, or AuthZ Role User for custom RBAC assignments)

profile.groups — group UUIDs the user has access to

is_active — whether the account is currently enabled

last_login — most recent authenticated session timestamp

has_emm — whether the user has an associated EMM account

is_email_verified — whether the user has completed email verification

Common Use Cases

Looking up a specific user's role and group scope before modifying their access

Verifying account status (is_active, is_email_verified) for a user who is reporting access problems

Retrieving a user's EMM linkage details for troubleshooting enrollment issues

Best Practices

Obtain user_id from GET /user/ — it is an integer, distinct from the UUID-format authn_user_id used by other endpoints such as DELETE /authn2/v0/tenant/{enterprise_id}/user/{user_id}/

For users with profile.role of AuthZ Role User, their effective permissions are governed by their custom RBAC scope — check their role assignment via GET /authz2/v1/users/{user_id}/groups for a complete picture of their access

Use GET /user_info/ instead if you need details about the currently authenticated caller rather than a specific user by ID

Workflow

Call GET /user/ to enumerate tenant users and identify the target user's integer id

Call GET /user/{user_id}/ with that id to retrieve the full user record

Inspect profile.role, is_active, and is_email_verified for the information needed