---
title: "Get user details"
method: GET
path: "/v1/users/{user-id}"
tags: ["Users"]
---

# Get user details

`GET /v1/users/{user-id}`

Retrieve details of a specific user by ID. Requires MANAGE_USERS access right.

## Path parameters

- `user-id` integer, required

## Response `200`

User retrieved successfully

- User — User account
  - `id` integer — User ID
  - `guid` string, uuid — User GUID
  - `name` string — Login name
  - `description` string — User description
  - `systemRights` integer — System access rights bitmask
  - `uiAccessRules` string — UI access rules
  - `flags` UserFlags — User or group flags. When used in update requests, only the specified boolean fields are modified (PATCH semantics).
    - `disabled` boolean — Whether the account is disabled
    - `changePassword` boolean — Must change password at next login
    - `cannotChangePassword` boolean — Cannot change own password
    - `intruderLockout` boolean — Account locked out due to repeated authentication failures
    - `passwordNeverExpires` boolean — Password never expires
    - `ldapUser` boolean — Synchronized from LDAP
    - `syncException` boolean — Excluded from LDAP synchronization
    - `closeOtherSessions` boolean — Close other sessions on login
    - `tokenAuthOnly` boolean — Can only authenticate using API tokens
    - `twoFAExempt` boolean — Exempt from two-factor authentication
    - `twoFAEnforce` boolean — Two-factor authentication is enforced
    - `serviceAccount` boolean — Service account (can only authenticate via API tokens, interactive login rejected)
  - `attributes` object — Custom attributes
  - `ldapDn` string, nullable — LDAP distinguished name
  - `ldapId` string, nullable — LDAP unique ID
  - `created` integer — Account creation time (Unix timestamp)
  - `fullName` string — Full name
  - `graceLogins` integer — Remaining grace logins
  - `twoFAGraceLogins` integer — Remaining two-factor authentication grace logins
  - `authMethod` integer — Authentication method (0=Local, 1=RADIUS, 2=Certificate, 3=Certificate or Local, 4=Certificate or RADIUS, 5=LDAP)
  - `certMappingMethod` integer — Certificate mapping method
  - `certMappingData` string, nullable — Certificate mapping data
  - `disabledUntil` integer — Disabled until time (Unix timestamp, 0 if not temporarily disabled)
  - `lastPasswordChange` integer — Last password change time (Unix timestamp)
  - `lastLogin` integer — Last login time (Unix timestamp)
  - `minPasswordLength` integer — Minimum password length (-1 for system default)
  - `authFailures` integer — Consecutive authentication failure count
  - `email` string — Email address
  - `phoneNumber` string — Phone number
  - `groups` integer[] — List of group identifiers this user belongs to

## Other responses

- `401` — Unauthorized
- `403` — User does not have MANAGE_USERS access right
- `404` — User not found

---

[API](https://skmtc.net/netxms/apis/netxms-api.md) · [All operations](https://skmtc.net/netxms/apis/netxms-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/netxms/netxms-api/versions/14d93e5115dd/schema)