OneRoster - Get all users

Requires permission: ServiceAccount

OneRoster v1.1 GetAllUsers. Pupils map to role=student, staff to role=teacher. Supports offset/limit paging and status / dateLastModified filtering.