A user (or IAM user) is a human user in an Organization. They can be the Owner of an Organization linked to their Scaleway account, a Guest in another Organization, or a Member exclusive to a single Organization, not owning an Organization of their own. Each Organization can have IAM users with varying rights over resources, depending on its IAM policies.
List users of an Organization
List the users of an Organization. By default, the users listed are ordered by creation date in ascending order. This can be modified via the order_by field. You must define the organization_id in the query path of your request. You can also define additional parameters for your query such as user_ids.
query Parameters
order_byCriteria for sorting results.
page_sizeNumber of results per page. Value must be between 1 and 100.
pagePage number. Value must be greater or equal to 1.
organization_idID of the Organization to filter.
user_idsFilter by list of IDs.
mfaFilter by MFA status.
tagFilter by tags containing a given string.
typeFilter by user type.
List users of an Organization › Responses
List of users.
total_countTotal count of users.
Create a new user
Create a new user. You must define the organization_id in your request. If you are adding a member, enter the member's details. If you are adding a guest, you must define the email and not add the member attribute.
Create a new user › Request Body
organization_idID of the Organization.
emailEmail of the user.
tagsTags associated with the user.
Details of IAM member.
Create a new user › Responses
idID of user.
emailEmail of user.
usernameUser identifier unique to the Organization.
first_nameFirst name of the user.
last_nameLast name of the user.
phone_numberPhone number of the user.
localeLocale of the user.
created_atDate user was created. (RFC 3339 format)
updated_atDate of last user update. (RFC 3339 format)
organization_idID of the Organization.
deletableDeletion status of user. Owners cannot be deleted.
last_login_atDate of the last login. (RFC 3339 format)
typeType of user.
mfaDefines whether MFA is enabled.
account_root_user_idID of the account root user associated with the user.
tagsTags associated with the user.
lockedDefines whether the user is locked.
two_factor_enabledDeprecated, use "mfa" instead.
statusStatus of user invitation.
Get a given user
Retrieve information about a user, specified by the user_id parameter. The user's full details, including id, email, organization_id, status and mfa are returned in the response.
path Parameters
user_idID of the user to find.
Get a given user › Responses
idID of user.
emailEmail of user.
usernameUser identifier unique to the Organization.
first_nameFirst name of the user.
last_nameLast name of the user.
phone_numberPhone number of the user.
localeLocale of the user.
created_atDate user was created. (RFC 3339 format)
updated_atDate of last user update. (RFC 3339 format)
organization_idID of the Organization.
deletableDeletion status of user. Owners cannot be deleted.
last_login_atDate of the last login. (RFC 3339 format)
typeType of user.
mfaDefines whether MFA is enabled.
account_root_user_idID of the account root user associated with the user.
tagsTags associated with the user.
lockedDefines whether the user is locked.
two_factor_enabledDeprecated, use "mfa" instead.
statusStatus of user invitation.
Delete a guest user from an Organization
Remove a user from an Organization in which they are a guest. You must define the user_id in your request. Note that removing a user from an Organization automatically deletes their API keys, and any policies directly attached to them become orphaned.
path Parameters
user_idID of the user to delete.
Delete a guest user from an Organization › Responses
Update a user
Update the parameters of a user, including tags.
path Parameters
user_idID of the user to update.
Update a user › Request Body
tagsNew tags for the user (maximum of 10 tags).
emailIAM member email.
first_nameIAM member first name.
last_nameIAM member last name.
phone_numberIAM member phone number.
localeIAM member locale.
Update a user › Responses
idID of user.
emailEmail of user.
usernameUser identifier unique to the Organization.
first_nameFirst name of the user.
last_nameLast name of the user.
phone_numberPhone number of the user.
localeLocale of the user.
created_atDate user was created. (RFC 3339 format)
updated_atDate of last user update. (RFC 3339 format)
organization_idID of the Organization.
deletableDeletion status of user. Owners cannot be deleted.
last_login_atDate of the last login. (RFC 3339 format)
typeType of user.
mfaDefines whether MFA is enabled.
account_root_user_idID of the account root user associated with the user.
tagsTags associated with the user.
lockedDefines whether the user is locked.
two_factor_enabledDeprecated, use "mfa" instead.
statusStatus of user invitation.
Lock a member
Lock a member. A locked member cannot log in or use API keys until the locked status is removed.
path Parameters
user_idID of the user to lock.
Lock a member › Responses
idID of user.
emailEmail of user.
usernameUser identifier unique to the Organization.
first_nameFirst name of the user.
last_nameLast name of the user.
phone_numberPhone number of the user.
localeLocale of the user.
created_atDate user was created. (RFC 3339 format)
updated_atDate of last user update. (RFC 3339 format)
organization_idID of the Organization.
deletableDeletion status of user. Owners cannot be deleted.
last_login_atDate of the last login. (RFC 3339 format)
typeType of user.
mfaDefines whether MFA is enabled.
account_root_user_idID of the account root user associated with the user.
tagsTags associated with the user.
lockedDefines whether the user is locked.
two_factor_enabledDeprecated, use "mfa" instead.
statusStatus of user invitation.
Unlock a member
path Parameters
user_idID of the user to unlock.
Unlock a member › Responses
idID of user.
emailEmail of user.
usernameUser identifier unique to the Organization.
first_nameFirst name of the user.
last_nameLast name of the user.
phone_numberPhone number of the user.
localeLocale of the user.
created_atDate user was created. (RFC 3339 format)
updated_atDate of last user update. (RFC 3339 format)
organization_idID of the Organization.
deletableDeletion status of user. Owners cannot be deleted.
last_login_atDate of the last login. (RFC 3339 format)
typeType of user.
mfaDefines whether MFA is enabled.
account_root_user_idID of the account root user associated with the user.
tagsTags associated with the user.
lockedDefines whether the user is locked.
two_factor_enabledDeprecated, use "mfa" instead.
statusStatus of user invitation.
Update an user's password.
path Parameters
user_idID of the user to update.
Update an user's password. › Responses
idID of user.
emailEmail of user.
usernameUser identifier unique to the Organization.
first_nameFirst name of the user.
last_nameLast name of the user.
phone_numberPhone number of the user.
localeLocale of the user.
created_atDate user was created. (RFC 3339 format)
updated_atDate of last user update. (RFC 3339 format)
organization_idID of the Organization.
deletableDeletion status of user. Owners cannot be deleted.
last_login_atDate of the last login. (RFC 3339 format)
typeType of user.
mfaDefines whether MFA is enabled.
account_root_user_idID of the account root user associated with the user.
tagsTags associated with the user.
lockedDefines whether the user is locked.
two_factor_enabledDeprecated, use "mfa" instead.
statusStatus of user invitation.
Update an user's username.
path Parameters
user_idID of the user to update.
Update an user's username. › Responses
idID of user.
emailEmail of user.
usernameUser identifier unique to the Organization.
first_nameFirst name of the user.
last_nameLast name of the user.
phone_numberPhone number of the user.
localeLocale of the user.
created_atDate user was created. (RFC 3339 format)
updated_atDate of last user update. (RFC 3339 format)
organization_idID of the Organization.
deletableDeletion status of user. Owners cannot be deleted.
last_login_atDate of the last login. (RFC 3339 format)
typeType of user.
mfaDefines whether MFA is enabled.
account_root_user_idID of the account root user associated with the user.
tagsTags associated with the user.
lockedDefines whether the user is locked.
two_factor_enabledDeprecated, use "mfa" instead.
statusStatus of user invitation.