Account Users
account_user objectA user's membership in an account, carrying the account-specific status, role, and department.
Profile fields (name, email, username, image URL) live on the expandable user sub-resource, which is shared across every account the user belongs to.
idstringAccount user ID.
objectstringenumValues:account_userResource type identifier.
statusstringenumValues:activedisabledremovedAccount user status.
active: the user can access the account.disabled: the user is locked out of the account.removed: the user has been removed (soft-deleted) from the account.
Assigned role.
idstringRole ID.
objectstringenumValues:roleResource type identifier.
namestringDisplay name, unique within the account.
typestringenumValues:adminuserscannerThe kind of role.
The role's type is sometimes used to gate special behaviors and to restrict some actions to only certain types of roles. For example, only roles with the type admin can create and manage API keys.
admin: full administrative access, including managing API keys.user: a custom role tailored to a specific need (its permissions are defined explicitly). Roles created through the API always have this type.scanner: a role for scanning-station operators.sales_rep: a role for sales representatives.agent: a role assigned to an automated agent rather than a person.
ownerownernullableProvenance of this role.
System-owned roles are global defaults shared across all accounts and cannot be modified or deleted; account-owned roles are custom roles created by that account.
null in this endpoint.permissionsarray of stringnullablePermissions granted by this role, in {domain}:{action} format, such as customers:read.
created_atstring (date-time)Creation timestamp.
updated_atstring (date-time)Last updated timestamp.
departmentdepartmentnullableAssigned department.
idstringDepartment ID.
objectstringenumValues:departmentResource type identifier.
namestringDisplay name of the department.
Unique within the account.
notesstringnullableFree-form notes about the department.
locationlocationnullableThe storage location where this department operates.
null in this endpoint.Scanning stations in this department.
null in this endpoint.Machines in this department.
null in this endpoint.created_atstring (date-time)Creation timestamp.
updated_atstring (date-time)Last update timestamp.
userusernullableUnderlying user.
idstringUser ID.
objectstringenumValues:userResource type identifier.
emailstringnullableEmail address.
namestringnullableUser's full display name.
usernamestringnullableUsername.
email_verified_atstring (date-time)nullableWhen the user verified their email address.
image_urlstringnullableURL of the user's profile image.
created_atstring (date-time)Creation timestamp.
updated_atstring (date-time)Last updated timestamp.
last_used_atstring (date-time)nullableWhen the user last accessed this account.
created_atstring (date-time)When the account user was created.
updated_atstring (date-time)When the account user was last updated.