---
title: "Get provisioning diff"
method: POST
path: "/hris/provisioning-groups/{group_id}/diff"
tags: ["Unified HRIS API"]
---

# Get provisioning diff

`POST /hris/provisioning-groups/{group_id}/diff`

Get the list of users to provision, deprovision, and optionally update based on the users you've already provisioned in your system.

## Path parameters

- `group_id` string, required — ID of the provisioning group (currently only `default` is allowed).

## Headers

- `X-Integration-Id` string, required

## Request body

- PostHrisProvisioningGroupsGroupIdDiffRequestBody
  - `provisioned_users` object[], required — Array of the already provisioned users in your system.
    - `origin_id` string, required — _Your_ ID for this user (_not_ an ID retrieved from Kombo).
    - `email` string, email, required — This user's email address.
  - `options` object, required — Options to customize what we return.
    - `employee_fields` string[], required — The employee fields relevant for your use case.

## Response `200`

POST /hris/provisioning-groups/:group_id/diff Positive response

- PostHrisProvisioningGroupsGroupIdDiffPositiveResponse
  - `status` 'success', required
  - `data` object, required — The users to provision, deprovision, and optionally update.
    - `users` object, required
      - `to_provision` object[], required — The users we've found in the HR systems who match the provisioning filters but haven't been provisioned in your system yet.
        - `email` string, nullable, required — The email address of the user.
        - `employee` object, required — The field of the underlying employee (which ones are included depends on the `employee_fields` array you supplied).
          - `id` string
          - `remote_id` string, nullable
          - `first_name` string, nullable
          - `last_name` string, nullable
          - `groups` object[]
            - `id` string, required
            - `remote_id` string, nullable, required
            - `name` string, nullable, required
          - `avatar` string, nullable
          - `work_location_id` string, nullable
          - `legal_entity_id` string, nullable
      - `to_deprovision` object[], required — The users who've been provisioned in your system but couldn't be found in the HR system or don't match the provisioning filters.
        - `origin_id` string, required — _Your_ ID for this user (that you submitted through `origin_id`).
        - `email` string, email, required — The email address of the user.
      - `already_provisioned` object[], required — The users who are in the HR system and match the provisioning filters but have already been provisioned in your system.
        - `origin_id` string, required — _Your_ ID for this user (that you submitted through `origin_id`).
        - `email` string, email, required — The email address of the user.
        - `employee` object, required — The field of the underlying employee (which ones are included depends on the `employee_fields` array you supplied).
          - `id` string
          - `remote_id` string, nullable
          - `first_name` string, nullable
          - `last_name` string, nullable
          - `groups` object[]
            - `id` string, required
            - `remote_id` string, nullable, required
            - `name` string, nullable, required
          - `avatar` string, nullable
          - `work_location_id` string, nullable
          - `legal_entity_id` string, nullable

## Other responses

- `default` — The standard error response with the error codes for the HRIS use case.

---

[API](https://skmtc.net/kombo/apis/kombo-api.md) · [All operations](https://skmtc.net/kombo/apis/kombo-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/kombo/kombo-api/versions/1e45035b96d3/schema)