---
title: "Get multiple users by id"
method: POST
path: "/users/bulk"
tags: ["Users"]
---

# Get multiple users by id

`POST /users/bulk`

Get multiple users by id.

🔒 Requires: `users:read` scope

## Request body

- string[] — An array of user IDs to retrieve.

## Response `200`

- UserCollection
  - `data` User[], required — An array of users.
    - `account_type` 'cashier' | 'manager' | 'admin', required — User's account type.
    - `created_at` string, required — Creation timestamp in UTC.
    - `deleted_at` string, nullable — Deletion timestamp in UTC.
    - `display_name` string, nullable — Full user's name to be used for display in the UI.
    - `email` string, email, nullable — User's email address.
    - `email_verified_at` string, nullable — The timestamp of users email verification.
    - `enabled` boolean — Indicates whether the user is enabled.
    - `enabled_mfa` object, nullable — The user's enabled MFA factor, or null if MFA is not enabled.
      - `created_at` string — Timestamp when the MFA factor was created.
      - `id` string — Auto-generated MFA factor ID.
      - `type` 'otp' — The MFA factor type (e.g. "otp").
    - `id` string, uuid, required — Auto-generated object ID.
    - `image_source` string — URL of the default-sized user's avatar.
    - `images` UserImages, nullable — On object containing URLs for different sizes of the user’s avatar.
      - `original` string
      - `sl` string
      - `sm` string
      - `ss` string
      - `st` string
      - `standard` string
      - `thumb` string
    - `is_primary_user` boolean, required — Indicated whether this user is the primary user for the account.
    - `permissions` string[], nullable — The permissions assigned to the user.
    - `require_password_change` boolean — Indicates whether the user is required to change their password.
    - `restricted_outlet_id` string, nullable — **deprecated** Use the `restricted_outlet_ids` instead.
    - `restricted_outlet_ids` string[] — A list of outlet IDs the user is associated with
    - `roles` Role[] — The roles assigned to the user.
      - `id` string — Auto-generated object ID.
      - `name` string — The Role name.
      - `system_role_id` string — A system role id of the Role. Will be either '100', '200', or '300'.
    - `rules` object — The rules assigned to the user.
    - `seen_at` string — The timestamp of the user's last activity in the system.
    - `switch_id` string — The switch id for the user.
    - `target_daily` number, nullable — Daily sales target for the user.
    - `target_monthly` number, nullable — Monthly sales target for the user.
    - `target_weekly` number, nullable — Weekly sales target for the user.
    - `time_until_deletion` string, nullable — The time until the user is deleted.
    - `updated_at` string, required — Last update timestamp in UTC.
    - `username` string, required — User's username used for login.
    - `version` integer, required — Auto-incrementing object version number.
  - `version` Version, required — An object containing the highest and lowest version numbers for all items of the returned collection.
    - `max` integer, nullable, required — Highest version number of the payload, or `null` when the result set is empty.
    - `min` integer, nullable, required — Lowest version number of the payload, or `null` when the result set is empty.

---

[API](https://skmtc.net/lightspeedhq/apis/api-2026-07.md) · [All operations](https://skmtc.net/lightspeedhq/apis/api-2026-07/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/lightspeedhq/api-2026-07/revisions/72d4ceb46dbb/schema)