Skip to main content
GET
Get user details by user ID
Retrieves full details for a Syteca user — login, user type (Internal / AD / Application Account), administrative permissions, Client access rules, User-to-User access rules, group memberships. The canonical “read” endpoint for user-management automation.
For ACB deployments updated from a version prior to 1.2, switch to the https://{hostname}/EkranACB server in the Playground.

Permissions required

The Access Token must be issued to a user with the administrative User Management permission.

Common use cases

  • User audit reports — Pull every user’s permissions and access rules for periodic review.
  • Pre-modification verification — Read current state before issuing a PUT to update permissions, so changes are based on the current truth.
  • Compliance evidence collection — Document who has what permissions for SOC 2, ISO 27001 audit windows.

Errors

See Status codes. Common errors:
  • 403 Forbidden — user lacks administrative User Management permission.
  • 404 Not Found — user doesn’t exist.

Update admin permissions

Modify administrative permissions.

Update client access

Modify Client access rules.

Update user access

Modify User-to-User access rules.

Delete user

Remove the user.

Authorizations

Authorization
string
header
required

Access token for authentication

Path Parameters

userId
integer<int32>
required

Syteca user identifier (internal or domain)

Response

User details retrieved successfully

id
integer<int32>

Unique Syteca user ID

user_type
string | null

User type

two_factor_required
boolean

Two-factor authentication on login

external_app_enabled
boolean

Allow this user account to be used by external applications

auth_token_lifetime_sec
integer<int32> | null

The lifetime of an access token in seconds for this user

ip_restrictions
string[] | null

Allowed IP address for this user's API access

IP address

user_group_ids
integer<int32>[] | null

List of Syteca user group IDs this user belongs to

Syteca user group ID

has_user_groups
boolean

The user is a member of any user groups

username
string | null

Login name

first_name
string | null

First name

last_name
string | null

Last name

email
string | null

Email address

description
string | null

Optional description/comment

domain
string | null

AD domain name

account_name
string | null

Domain account name