---
title: "OneRoster - Get all users"
method: GET
path: "/oneroster/users"
tags: ["Oneroster"]
---

# OneRoster - Get all users

`GET /oneroster/users`

**Requires permission:** *ServiceAccount*

OneRoster v1.1 GetAllUsers. Pupils map to role=student, staff to role=teacher. Supports offset/limit paging and status / dateLastModified filtering.

## Response `200`

Success - users

- UserSetResponse
  - `users` OrUser[]
    - `sourcedId` string, nullable
    - `status` string
    - `dateLastModified` string, date-time, nullable
    - `enabledUser` boolean
    - `username` string, nullable
    - `givenName` string, nullable
    - `familyName` string, nullable
    - `middleName` string, nullable
    - `role` string, nullable
    - `identifier` string, nullable
    - `email` string, nullable
    - `orgs` OrGuidRef[]
      - `href` string, nullable
      - `sourcedId` string, nullable
      - `type` string, nullable
    - `grades` string[]

## Other responses

- `401` — Unauthorized
- `403` — Caller is not an authorised service account

---

[API](https://skmtc.net/tonbridge/apis/tonbridge-app-api.md) · [All operations](https://skmtc.net/tonbridge/apis/tonbridge-app-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/tonbridge/tonbridge-app-api/versions/e0bc2ad906d8/schema)