Skip to main content
The users client methods are currently in BETA. The API may change without notice. A one-time warning is emitted on first use.
Manage account users programmatically. Unlike organizations, users are looked up by ID only — not by name — because display names are not unique within an account.

Key Capabilities

  • List users in the account with optional email and status filters
  • Retrieve user details by ID
  • Create new users with account-level role assignments
  • Update display name and developer permission flag
  • Soft-delete users individually or in bulk (cascades to memberships, API keys, and role bindings)
  • Resend invitations and trigger password-reset emails

List Users

List users in the account. Optionally filter by an email substring (case-insensitive) and one or more statuses.
For details on pagination, field introspection, and data conversion (to dict/JSON/DataFrame), see Response Objects.

Get a User

Retrieve a specific user by ID or by exact email address. When user contains @ it is treated as an email and looked up case-insensitively (returns None if no exact match); otherwise it is treated as a user ID.

Create a User

Create a new user and assign them an account-level role. The email is used as the idempotency key.
To assign a custom RBAC role instead:
is_developer defaults to True for ADMIN / MEMBER roles and False for ANNOTATOR. You can override it explicitly:

Update a User

Update a user’s metadata. At least one of name or is_developer must be provided.

Delete a User

Soft-delete a user. This cascades to organization memberships, space memberships, API keys, and role bindings.

Bulk Delete Users

Soft-delete multiple users in a single call by ID, email, or a mix. When emails are provided, each is resolved to a user ID via a case-insensitive exact match; unresolved emails are recorded as NOT_FOUND. At least one of user_ids or emails must be provided.
Each BulkUserDeletionResult has a status of DELETED, NOT_FOUND, or FAILED, with an optional error message for failures.

Resend an Invitation

Resend an invitation email for a pending user. The target user must currently be in the invited state.

Reset a Password

Trigger a password-reset email for a user. The user must authenticate via password (not SSO/SAML) and must have already verified their account. The reset link is valid for 30 minutes.