naftiko: 1.0.0-alpha2 info: label: Gravitee.io - Access Management API — user description: 'Gravitee.io - Access Management API — user. 51 operations. Lead operation: List users for a security domain. Self-contained Naftiko capability covering one Gravitee business surface.' tags: - Gravitee - user created: '2026-05-19' modified: '2026-05-19' binds: - namespace: env keys: GRAVITEE_API_KEY: GRAVITEE_API_KEY capability: consumes: - type: http namespace: am-user baseUri: '' description: Gravitee.io - Access Management API — user business capability. Self-contained, no shared references. resources: - name: organizations-organizationId-environments-environmentId-domains-domain-users path: /organizations/{organizationId}/environments/{environmentId}/domains/{domain}/users operations: - name: listusers method: GET description: List users for a security domain outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: organizationId in: path type: string required: true - name: environmentId in: path type: string required: true - name: domain in: path type: string required: true - name: q in: query type: string - name: filter in: query type: string - name: page in: query type: integer - name: size in: query type: integer - name: createuser method: POST description: Create a user on the specified security domain outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: organizationId in: path type: string required: true - name: environmentId in: path type: string required: true - name: domain in: path type: string required: true - name: body in: body type: object description: Request body (JSON). required: true - name: organizations-organizationId-environments-environmentId-domains-domain-users-bul path: /organizations/{organizationId}/environments/{environmentId}/domains/{domain}/users/bulk operations: - name: bulkuseroperation method: POST description: Create/update/delete multiple users on the specified security domain outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: organizationId in: path type: string required: true - name: environmentId in: path type: string required: true - name: domain in: path type: string required: true - name: body in: body type: object description: Request body (JSON). required: true - name: organizations-organizationId-environments-environmentId-domains-domain-users-use path: /organizations/{organizationId}/environments/{environmentId}/domains/{domain}/users/{user} operations: - name: finduser method: GET description: Get a user outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: organizationId in: path type: string required: true - name: environmentId in: path type: string required: true - name: domain in: path type: string required: true - name: user in: path type: string required: true - name: updateuser method: PUT description: Update a user outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: organizationId in: path type: string required: true - name: environmentId in: path type: string required: true - name: domain in: path type: string required: true - name: user in: path type: string required: true - name: body in: body type: object description: Request body (JSON). required: true - name: deleteuser method: DELETE description: Delete a user outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: organizationId in: path type: string required: true - name: environmentId in: path type: string required: true - name: domain in: path type: string required: true - name: user in: path type: string required: true - name: organizations-organizationId-environments-environmentId-domains-domain-users-use path: /organizations/{organizationId}/environments/{environmentId}/domains/{domain}/users/{user}/audits operations: - name: listuserauditlogs method: GET description: Get a user audit logs outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: organizationId in: path type: string required: true - name: environmentId in: path type: string required: true - name: domain in: path type: string required: true - name: user in: path type: string required: true - name: type in: query type: string - name: status in: query type: string - name: from in: query type: integer - name: to in: query type: integer - name: size in: query type: integer - name: page in: query type: integer - name: organizations-organizationId-environments-environmentId-domains-domain-users-use path: /organizations/{organizationId}/environments/{environmentId}/domains/{domain}/users/{user}/audits/{audit} operations: - name: getuserauditlog method: GET description: Get a user audit log outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: organizationId in: path type: string required: true - name: environmentId in: path type: string required: true - name: domain in: path type: string required: true - name: user in: path type: string required: true - name: audit in: path type: string required: true - name: organizations-organizationId-environments-environmentId-domains-domain-users-use path: /organizations/{organizationId}/environments/{environmentId}/domains/{domain}/users/{user}/cert-credentials operations: - name: listusercertificatecredentials method: GET description: Get user certificate credentials outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: organizationId in: path type: string required: true - name: environmentId in: path type: string required: true - name: domain in: path type: string required: true - name: user in: path type: string required: true - name: enrollusercertificatecredential method: POST description: Enroll a certificate credential for a user outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: organizationId in: path type: string required: true - name: environmentId in: path type: string required: true - name: domain in: path type: string required: true - name: user in: path type: string required: true - name: body in: body type: object description: Request body (JSON). required: true - name: organizations-organizationId-environments-environmentId-domains-domain-users-use path: /organizations/{organizationId}/environments/{environmentId}/domains/{domain}/users/{user}/cert-credentials/{credential} operations: - name: getusercertificatecredential method: GET description: Get a user certificate credential outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: organizationId in: path type: string required: true - name: environmentId in: path type: string required: true - name: domain in: path type: string required: true - name: user in: path type: string required: true - name: credential in: path type: string required: true - name: revokeusercertificatecredential method: DELETE description: Revoke a user certificate credential outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: organizationId in: path type: string required: true - name: environmentId in: path type: string required: true - name: domain in: path type: string required: true - name: user in: path type: string required: true - name: credential in: path type: string required: true - name: organizations-organizationId-environments-environmentId-domains-domain-users-use path: /organizations/{organizationId}/environments/{environmentId}/domains/{domain}/users/{user}/consents operations: - name: listuserconsents method: GET description: Get a user consents outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: organizationId in: path type: string required: true - name: environmentId in: path type: string required: true - name: domain in: path type: string required: true - name: user in: path type: string required: true - name: clientId in: query type: string - name: revokeuserconsents method: DELETE description: Revoke user consents outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: organizationId in: path type: string required: true - name: environmentId in: path type: string required: true - name: domain in: path type: string required: true - name: user in: path type: string required: true - name: clientId in: query type: string - name: organizations-organizationId-environments-environmentId-domains-domain-users-use path: /organizations/{organizationId}/environments/{environmentId}/domains/{domain}/users/{user}/consents/{consent} operations: - name: getuserconsent method: GET description: Get a user consent outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: organizationId in: path type: string required: true - name: environmentId in: path type: string required: true - name: domain in: path type: string required: true - name: user in: path type: string required: true - name: consent in: path type: string required: true - name: revokeuserconsent method: DELETE description: Revoke a user consent outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: organizationId in: path type: string required: true - name: environmentId in: path type: string required: true - name: domain in: path type: string required: true - name: user in: path type: string required: true - name: consent in: path type: string required: true - name: organizations-organizationId-environments-environmentId-domains-domain-users-use path: /organizations/{organizationId}/environments/{environmentId}/domains/{domain}/users/{user}/credentials operations: - name: listusercredentials method: GET description: Get a user credentials outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: organizationId in: path type: string required: true - name: environmentId in: path type: string required: true - name: domain in: path type: string required: true - name: user in: path type: string required: true - name: organizations-organizationId-environments-environmentId-domains-domain-users-use path: /organizations/{organizationId}/environments/{environmentId}/domains/{domain}/users/{user}/credentials/{credential} operations: - name: getusercredential method: GET description: Get a user credential outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: organizationId in: path type: string required: true - name: environmentId in: path type: string required: true - name: domain in: path type: string required: true - name: user in: path type: string required: true - name: credential in: path type: string required: true - name: revokeusercredential method: DELETE description: Revoke a user credential outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: organizationId in: path type: string required: true - name: environmentId in: path type: string required: true - name: domain in: path type: string required: true - name: user in: path type: string required: true - name: credential in: path type: string required: true - name: organizations-organizationId-environments-environmentId-domains-domain-users-use path: /organizations/{organizationId}/environments/{environmentId}/domains/{domain}/users/{user}/devices operations: - name: listuserdevices method: GET description: List users for a security domain outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: organizationId in: path type: string required: true - name: environmentId in: path type: string required: true - name: domain in: path type: string required: true - name: user in: path type: string required: true - name: organizations-organizationId-environments-environmentId-domains-domain-users-use path: /organizations/{organizationId}/environments/{environmentId}/domains/{domain}/users/{user}/devices/{device} operations: - name: deleteuserdevice method: DELETE description: Delete a device outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: organizationId in: path type: string required: true - name: environmentId in: path type: string required: true - name: domain in: path type: string required: true - name: user in: path type: string required: true - name: device in: path type: string required: true - name: organizations-organizationId-environments-environmentId-domains-domain-users-use path: /organizations/{organizationId}/environments/{environmentId}/domains/{domain}/users/{user}/factors operations: - name: listuserenrolledfactors method: GET description: Get a user enrolled factors outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: organizationId in: path type: string required: true - name: environmentId in: path type: string required: true - name: domain in: path type: string required: true - name: user in: path type: string required: true - name: organizations-organizationId-environments-environmentId-domains-domain-users-use path: /organizations/{organizationId}/environments/{environmentId}/domains/{domain}/users/{user}/factors/{factor} operations: - name: deleteuserfactor method: DELETE description: Revoke user factor outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: organizationId in: path type: string required: true - name: environmentId in: path type: string required: true - name: domain in: path type: string required: true - name: user in: path type: string required: true - name: factor in: path type: string required: true - name: organizations-organizationId-environments-environmentId-domains-domain-users-use path: /organizations/{organizationId}/environments/{environmentId}/domains/{domain}/users/{user}/identities operations: - name: listuseridentities method: GET description: Get a user linked identities outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: organizationId in: path type: string required: true - name: environmentId in: path type: string required: true - name: domain in: path type: string required: true - name: user in: path type: string required: true - name: organizations-organizationId-environments-environmentId-domains-domain-users-use path: /organizations/{organizationId}/environments/{environmentId}/domains/{domain}/users/{user}/identities/{identity} operations: - name: unlinkuseridentity method: DELETE description: Unlink user identity outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: organizationId in: path type: string required: true - name: environmentId in: path type: string required: true - name: domain in: path type: string required: true - name: user in: path type: string required: true - name: identity in: path type: string required: true - name: organizations-organizationId-environments-environmentId-domains-domain-users-use path: /organizations/{organizationId}/environments/{environmentId}/domains/{domain}/users/{user}/lock operations: - name: lockuser method: POST description: Lock a user outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: organizationId in: path type: string required: true - name: environmentId in: path type: string required: true - name: domain in: path type: string required: true - name: user in: path type: string required: true - name: organizations-organizationId-environments-environmentId-domains-domain-users-use path: /organizations/{organizationId}/environments/{environmentId}/domains/{domain}/users/{user}/resetPassword operations: - name: resetpassword method: POST description: Reset password outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: organizationId in: path type: string required: true - name: environmentId in: path type: string required: true - name: domain in: path type: string required: true - name: user in: path type: string required: true - name: body in: body type: object description: Request body (JSON). required: true - name: organizations-organizationId-environments-environmentId-domains-domain-users-use path: /organizations/{organizationId}/environments/{environmentId}/domains/{domain}/users/{user}/roles operations: - name: listuserroles method: GET description: Get a user roles outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: organizationId in: path type: string required: true - name: environmentId in: path type: string required: true - name: domain in: path type: string required: true - name: user in: path type: string required: true - name: dynamic in: query type: boolean - name: assignrolestouser method: POST description: Assign roles to a user outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: organizationId in: path type: string required: true - name: environmentId in: path type: string required: true - name: domain in: path type: string required: true - name: user in: path type: string required: true - name: body in: body type: object description: Request body (JSON). required: true - name: organizations-organizationId-environments-environmentId-domains-domain-users-use path: /organizations/{organizationId}/environments/{environmentId}/domains/{domain}/users/{user}/roles/{role} operations: - name: revokeuserrole method: DELETE description: Revoke role to a user outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: organizationId in: path type: string required: true - name: environmentId in: path type: string required: true - name: domain in: path type: string required: true - name: user in: path type: string required: true - name: role in: path type: string required: true - name: organizations-organizationId-environments-environmentId-domains-domain-users-use path: /organizations/{organizationId}/environments/{environmentId}/domains/{domain}/users/{user}/sendRegistrationConfirmation operations: - name: sendregistrationconfirmation method: POST description: Send registration confirmation email outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: organizationId in: path type: string required: true - name: environmentId in: path type: string required: true - name: domain in: path type: string required: true - name: user in: path type: string required: true - name: organizations-organizationId-environments-environmentId-domains-domain-users-use path: /organizations/{organizationId}/environments/{environmentId}/domains/{domain}/users/{user}/status operations: - name: updateuserstatus method: PUT description: Update a user status outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: organizationId in: path type: string required: true - name: environmentId in: path type: string required: true - name: domain in: path type: string required: true - name: user in: path type: string required: true - name: body in: body type: object description: Request body (JSON). required: true - name: organizations-organizationId-environments-environmentId-domains-domain-users-use path: /organizations/{organizationId}/environments/{environmentId}/domains/{domain}/users/{user}/unlock operations: - name: unlockuser method: POST description: Unlock a user outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: organizationId in: path type: string required: true - name: environmentId in: path type: string required: true - name: domain in: path type: string required: true - name: user in: path type: string required: true - name: organizations-organizationId-environments-environmentId-domains-domain-users-use path: /organizations/{organizationId}/environments/{environmentId}/domains/{domain}/users/{user}/username operations: - name: updateusername method: PATCH description: Update a user username outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: organizationId in: path type: string required: true - name: environmentId in: path type: string required: true - name: domain in: path type: string required: true - name: user in: path type: string required: true - name: body in: body type: object description: Request body (JSON). required: true - name: organizations-organizationId-users path: /organizations/{organizationId}/users operations: - name: listorganisationusers method: GET description: List users of the organization outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: organizationId in: path type: string required: true - name: q in: query type: string - name: filter in: query type: string - name: page in: query type: integer - name: size in: query type: integer - name: createorganisationuser method: POST description: Create a platform user or Service Account outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: organizationId in: path type: string required: true - name: body in: body type: object description: Request body (JSON). required: true - name: organizations-organizationId-users-bulk path: /organizations/{organizationId}/users/bulk operations: - name: bulkorganisationuseroperation method: POST description: Create/update/delete platform users or Service Accounts outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: organizationId in: path type: string required: true - name: body in: body type: object description: Request body (JSON). required: true - name: organizations-organizationId-users-user path: /organizations/{organizationId}/users/{user} operations: - name: getorganizationuser method: GET description: Get a user outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: organizationId in: path type: string required: true - name: user in: path type: string required: true - name: updateorganizationuser method: PUT description: Update a user outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: organizationId in: path type: string required: true - name: user in: path type: string required: true - name: body in: body type: object description: Request body (JSON). required: true - name: deleteorganizationuser method: DELETE description: Delete a user outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: organizationId in: path type: string required: true - name: user in: path type: string required: true - name: organizations-organizationId-users-user-resetPassword path: /organizations/{organizationId}/users/{user}/resetPassword operations: - name: resetorganizationuserpassword method: POST description: Reset password outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: organizationId in: path type: string required: true - name: user in: path type: string required: true - name: body in: body type: object description: Request body (JSON). required: true - name: organizations-organizationId-users-user-status path: /organizations/{organizationId}/users/{user}/status operations: - name: updateorganizationuserstatus method: PUT description: Update a user status outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: organizationId in: path type: string required: true - name: user in: path type: string required: true - name: body in: body type: object description: Request body (JSON). required: true - name: organizations-organizationId-users-user-tokens path: /organizations/{organizationId}/users/{user}/tokens operations: - name: getorganizationusertokens method: GET description: Get tokens of a user outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: organizationId in: path type: string required: true - name: user in: path type: string required: true - name: createaccountaccesstoken method: POST description: Generate an account access token for a user outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: organizationId in: path type: string required: true - name: user in: path type: string required: true - name: body in: body type: object description: Request body (JSON). required: false - name: organizations-organizationId-users-user-tokens-tokenId path: /organizations/{organizationId}/users/{user}/tokens/{tokenId} operations: - name: revokeaccountaccesstoken method: DELETE description: Revoke an account access token outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: organizationId in: path type: string required: true - name: user in: path type: string required: true - name: tokenId in: path type: string required: true - name: organizations-organizationId-users-user-username path: /organizations/{organizationId}/users/{user}/username operations: - name: updateorganisationusername method: PATCH description: Update a user username outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: organizationId in: path type: string required: true - name: user in: path type: string required: true - name: body in: body type: object description: Request body (JSON). required: true - name: user path: /user operations: - name: getcurrentuser method: GET description: Get the current user outputRawFormat: json outputParameters: - name: result type: object value: $. - name: user-newsletter-_subscribe path: /user/newsletter/_subscribe operations: - name: subscribenewsletter method: POST description: Subscribe to the newsletter the authenticated user outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: true - name: user-newsletter-taglines path: /user/newsletter/taglines operations: - name: gettaglines method: GET description: Get taglines to display in the newsletter outputRawFormat: json outputParameters: - name: result type: object value: $. - name: user-notifications path: /user/notifications operations: - name: listnotifications method: GET description: List notifications received by the current user outputRawFormat: json outputParameters: - name: result type: object value: $. - name: user-notifications-notificationId-acknowledge path: /user/notifications/{notificationId}/acknowledge operations: - name: marknotificationasread method: POST description: Mark User notification as read outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: notificationId in: path type: string required: true authentication: type: bearer token: '{{env.GRAVITEE_API_KEY}}' exposes: - type: rest namespace: am-user-rest port: 8080 description: REST adapter for Gravitee.io - Access Management API — user. One Spectral-compliant resource per consumed operation, prefixed with /v1. resources: - path: /v1/organizations/{organizationid}/environments/{environmentid}/domains/{domain}/users name: organizations-organizationid-environments-environmentid-domains-domain-users description: REST surface for organizations-organizationId-environments-environmentId-domains-domain-users. operations: - method: GET name: listusers description: List users for a security domain call: am-user.listusers with: organizationId: rest.organizationId environmentId: rest.environmentId domain: rest.domain q: rest.q filter: rest.filter page: rest.page size: rest.size outputParameters: - type: object mapping: $. - method: POST name: createuser description: Create a user on the specified security domain call: am-user.createuser with: organizationId: rest.organizationId environmentId: rest.environmentId domain: rest.domain body: rest.body outputParameters: - type: object mapping: $. - path: /v1/organizations/{organizationid}/environments/{environmentid}/domains/{domain}/users/bulk name: organizations-organizationid-environments-environmentid-domains-domain-users-bul description: REST surface for organizations-organizationId-environments-environmentId-domains-domain-users-bul. operations: - method: POST name: bulkuseroperation description: Create/update/delete multiple users on the specified security domain call: am-user.bulkuseroperation with: organizationId: rest.organizationId environmentId: rest.environmentId domain: rest.domain body: rest.body outputParameters: - type: object mapping: $. - path: /v1/organizations/{organizationid}/environments/{environmentid}/domains/{domain}/users/{user} name: organizations-organizationid-environments-environmentid-domains-domain-users-use description: REST surface for organizations-organizationId-environments-environmentId-domains-domain-users-use. operations: - method: GET name: finduser description: Get a user call: am-user.finduser with: organizationId: rest.organizationId environmentId: rest.environmentId domain: rest.domain user: rest.user outputParameters: - type: object mapping: $. - method: PUT name: updateuser description: Update a user call: am-user.updateuser with: organizationId: rest.organizationId environmentId: rest.environmentId domain: rest.domain user: rest.user body: rest.body outputParameters: - type: object mapping: $. - method: DELETE name: deleteuser description: Delete a user call: am-user.deleteuser with: organizationId: rest.organizationId environmentId: rest.environmentId domain: rest.domain user: rest.user outputParameters: - type: object mapping: $. - path: /v1/organizations/{organizationid}/environments/{environmentid}/domains/{domain}/users/{user}/audits name: organizations-organizationid-environments-environmentid-domains-domain-users-use description: REST surface for organizations-organizationId-environments-environmentId-domains-domain-users-use. operations: - method: GET name: listuserauditlogs description: Get a user audit logs call: am-user.listuserauditlogs with: organizationId: rest.organizationId environmentId: rest.environmentId domain: rest.domain user: rest.user type: rest.type status: rest.status from: rest.from to: rest.to size: rest.size page: rest.page outputParameters: - type: object mapping: $. - path: /v1/organizations/{organizationid}/environments/{environmentid}/domains/{domain}/users/{user}/audits/{audit} name: organizations-organizationid-environments-environmentid-domains-domain-users-use description: REST surface for organizations-organizationId-environments-environmentId-domains-domain-users-use. operations: - method: GET name: getuserauditlog description: Get a user audit log call: am-user.getuserauditlog with: organizationId: rest.organizationId environmentId: rest.environmentId domain: rest.domain user: rest.user audit: rest.audit outputParameters: - type: object mapping: $. - path: /v1/organizations/{organizationid}/environments/{environmentid}/domains/{domain}/users/{user}/cert-credentials name: organizations-organizationid-environments-environmentid-domains-domain-users-use description: REST surface for organizations-organizationId-environments-environmentId-domains-domain-users-use. operations: - method: GET name: listusercertificatecredentials description: Get user certificate credentials call: am-user.listusercertificatecredentials with: organizationId: rest.organizationId environmentId: rest.environmentId domain: rest.domain user: rest.user outputParameters: - type: object mapping: $. - method: POST name: enrollusercertificatecredential description: Enroll a certificate credential for a user call: am-user.enrollusercertificatecredential with: organizationId: rest.organizationId environmentId: rest.environmentId domain: rest.domain user: rest.user body: rest.body outputParameters: - type: object mapping: $. - path: /v1/organizations/{organizationid}/environments/{environmentid}/domains/{domain}/users/{user}/cert-credentials/{credential} name: organizations-organizationid-environments-environmentid-domains-domain-users-use description: REST surface for organizations-organizationId-environments-environmentId-domains-domain-users-use. operations: - method: GET name: getusercertificatecredential description: Get a user certificate credential call: am-user.getusercertificatecredential with: organizationId: rest.organizationId environmentId: rest.environmentId domain: rest.domain user: rest.user credential: rest.credential outputParameters: - type: object mapping: $. - method: DELETE name: revokeusercertificatecredential description: Revoke a user certificate credential call: am-user.revokeusercertificatecredential with: organizationId: rest.organizationId environmentId: rest.environmentId domain: rest.domain user: rest.user credential: rest.credential outputParameters: - type: object mapping: $. - path: /v1/organizations/{organizationid}/environments/{environmentid}/domains/{domain}/users/{user}/consents name: organizations-organizationid-environments-environmentid-domains-domain-users-use description: REST surface for organizations-organizationId-environments-environmentId-domains-domain-users-use. operations: - method: GET name: listuserconsents description: Get a user consents call: am-user.listuserconsents with: organizationId: rest.organizationId environmentId: rest.environmentId domain: rest.domain user: rest.user clientId: rest.clientId outputParameters: - type: object mapping: $. - method: DELETE name: revokeuserconsents description: Revoke user consents call: am-user.revokeuserconsents with: organizationId: rest.organizationId environmentId: rest.environmentId domain: rest.domain user: rest.user clientId: rest.clientId outputParameters: - type: object mapping: $. - path: /v1/organizations/{organizationid}/environments/{environmentid}/domains/{domain}/users/{user}/consents/{consent} name: organizations-organizationid-environments-environmentid-domains-domain-users-use description: REST surface for organizations-organizationId-environments-environmentId-domains-domain-users-use. operations: - method: GET name: getuserconsent description: Get a user consent call: am-user.getuserconsent with: organizationId: rest.organizationId environmentId: rest.environmentId domain: rest.domain user: rest.user consent: rest.consent outputParameters: - type: object mapping: $. - method: DELETE name: revokeuserconsent description: Revoke a user consent call: am-user.revokeuserconsent with: organizationId: rest.organizationId environmentId: rest.environmentId domain: rest.domain user: rest.user consent: rest.consent outputParameters: - type: object mapping: $. - path: /v1/organizations/{organizationid}/environments/{environmentid}/domains/{domain}/users/{user}/credentials name: organizations-organizationid-environments-environmentid-domains-domain-users-use description: REST surface for organizations-organizationId-environments-environmentId-domains-domain-users-use. operations: - method: GET name: listusercredentials description: Get a user credentials call: am-user.listusercredentials with: organizationId: rest.organizationId environmentId: rest.environmentId domain: rest.domain user: rest.user outputParameters: - type: object mapping: $. - path: /v1/organizations/{organizationid}/environments/{environmentid}/domains/{domain}/users/{user}/credentials/{credential} name: organizations-organizationid-environments-environmentid-domains-domain-users-use description: REST surface for organizations-organizationId-environments-environmentId-domains-domain-users-use. operations: - method: GET name: getusercredential description: Get a user credential call: am-user.getusercredential with: organizationId: rest.organizationId environmentId: rest.environmentId domain: rest.domain user: rest.user credential: rest.credential outputParameters: - type: object mapping: $. - method: DELETE name: revokeusercredential description: Revoke a user credential call: am-user.revokeusercredential with: organizationId: rest.organizationId environmentId: rest.environmentId domain: rest.domain user: rest.user credential: rest.credential outputParameters: - type: object mapping: $. - path: /v1/organizations/{organizationid}/environments/{environmentid}/domains/{domain}/users/{user}/devices name: organizations-organizationid-environments-environmentid-domains-domain-users-use description: REST surface for organizations-organizationId-environments-environmentId-domains-domain-users-use. operations: - method: GET name: listuserdevices description: List users for a security domain call: am-user.listuserdevices with: organizationId: rest.organizationId environmentId: rest.environmentId domain: rest.domain user: rest.user outputParameters: - type: object mapping: $. - path: /v1/organizations/{organizationid}/environments/{environmentid}/domains/{domain}/users/{user}/devices/{device} name: organizations-organizationid-environments-environmentid-domains-domain-users-use description: REST surface for organizations-organizationId-environments-environmentId-domains-domain-users-use. operations: - method: DELETE name: deleteuserdevice description: Delete a device call: am-user.deleteuserdevice with: organizationId: rest.organizationId environmentId: rest.environmentId domain: rest.domain user: rest.user device: rest.device outputParameters: - type: object mapping: $. - path: /v1/organizations/{organizationid}/environments/{environmentid}/domains/{domain}/users/{user}/factors name: organizations-organizationid-environments-environmentid-domains-domain-users-use description: REST surface for organizations-organizationId-environments-environmentId-domains-domain-users-use. operations: - method: GET name: listuserenrolledfactors description: Get a user enrolled factors call: am-user.listuserenrolledfactors with: organizationId: rest.organizationId environmentId: rest.environmentId domain: rest.domain user: rest.user outputParameters: - type: object mapping: $. - path: /v1/organizations/{organizationid}/environments/{environmentid}/domains/{domain}/users/{user}/factors/{factor} name: organizations-organizationid-environments-environmentid-domains-domain-users-use description: REST surface for organizations-organizationId-environments-environmentId-domains-domain-users-use. operations: - method: DELETE name: deleteuserfactor description: Revoke user factor call: am-user.deleteuserfactor with: organizationId: rest.organizationId environmentId: rest.environmentId domain: rest.domain user: rest.user factor: rest.factor outputParameters: - type: object mapping: $. - path: /v1/organizations/{organizationid}/environments/{environmentid}/domains/{domain}/users/{user}/identities name: organizations-organizationid-environments-environmentid-domains-domain-users-use description: REST surface for organizations-organizationId-environments-environmentId-domains-domain-users-use. operations: - method: GET name: listuseridentities description: Get a user linked identities call: am-user.listuseridentities with: organizationId: rest.organizationId environmentId: rest.environmentId domain: rest.domain user: rest.user outputParameters: - type: object mapping: $. - path: /v1/organizations/{organizationid}/environments/{environmentid}/domains/{domain}/users/{user}/identities/{identity} name: organizations-organizationid-environments-environmentid-domains-domain-users-use description: REST surface for organizations-organizationId-environments-environmentId-domains-domain-users-use. operations: - method: DELETE name: unlinkuseridentity description: Unlink user identity call: am-user.unlinkuseridentity with: organizationId: rest.organizationId environmentId: rest.environmentId domain: rest.domain user: rest.user identity: rest.identity outputParameters: - type: object mapping: $. - path: /v1/organizations/{organizationid}/environments/{environmentid}/domains/{domain}/users/{user}/lock name: organizations-organizationid-environments-environmentid-domains-domain-users-use description: REST surface for organizations-organizationId-environments-environmentId-domains-domain-users-use. operations: - method: POST name: lockuser description: Lock a user call: am-user.lockuser with: organizationId: rest.organizationId environmentId: rest.environmentId domain: rest.domain user: rest.user outputParameters: - type: object mapping: $. - path: /v1/organizations/{organizationid}/environments/{environmentid}/domains/{domain}/users/{user}/resetpassword name: organizations-organizationid-environments-environmentid-domains-domain-users-use description: REST surface for organizations-organizationId-environments-environmentId-domains-domain-users-use. operations: - method: POST name: resetpassword description: Reset password call: am-user.resetpassword with: organizationId: rest.organizationId environmentId: rest.environmentId domain: rest.domain user: rest.user body: rest.body outputParameters: - type: object mapping: $. - path: /v1/organizations/{organizationid}/environments/{environmentid}/domains/{domain}/users/{user}/roles name: organizations-organizationid-environments-environmentid-domains-domain-users-use description: REST surface for organizations-organizationId-environments-environmentId-domains-domain-users-use. operations: - method: GET name: listuserroles description: Get a user roles call: am-user.listuserroles with: organizationId: rest.organizationId environmentId: rest.environmentId domain: rest.domain user: rest.user dynamic: rest.dynamic outputParameters: - type: object mapping: $. - method: POST name: assignrolestouser description: Assign roles to a user call: am-user.assignrolestouser with: organizationId: rest.organizationId environmentId: rest.environmentId domain: rest.domain user: rest.user body: rest.body outputParameters: - type: object mapping: $. - path: /v1/organizations/{organizationid}/environments/{environmentid}/domains/{domain}/users/{user}/roles/{role} name: organizations-organizationid-environments-environmentid-domains-domain-users-use description: REST surface for organizations-organizationId-environments-environmentId-domains-domain-users-use. operations: - method: DELETE name: revokeuserrole description: Revoke role to a user call: am-user.revokeuserrole with: organizationId: rest.organizationId environmentId: rest.environmentId domain: rest.domain user: rest.user role: rest.role outputParameters: - type: object mapping: $. - path: /v1/organizations/{organizationid}/environments/{environmentid}/domains/{domain}/users/{user}/sendregistrationconfirmation name: organizations-organizationid-environments-environmentid-domains-domain-users-use description: REST surface for organizations-organizationId-environments-environmentId-domains-domain-users-use. operations: - method: POST name: sendregistrationconfirmation description: Send registration confirmation email call: am-user.sendregistrationconfirmation with: organizationId: rest.organizationId environmentId: rest.environmentId domain: rest.domain user: rest.user outputParameters: - type: object mapping: $. - path: /v1/organizations/{organizationid}/environments/{environmentid}/domains/{domain}/users/{user}/status name: organizations-organizationid-environments-environmentid-domains-domain-users-use description: REST surface for organizations-organizationId-environments-environmentId-domains-domain-users-use. operations: - method: PUT name: updateuserstatus description: Update a user status call: am-user.updateuserstatus with: organizationId: rest.organizationId environmentId: rest.environmentId domain: rest.domain user: rest.user body: rest.body outputParameters: - type: object mapping: $. - path: /v1/organizations/{organizationid}/environments/{environmentid}/domains/{domain}/users/{user}/unlock name: organizations-organizationid-environments-environmentid-domains-domain-users-use description: REST surface for organizations-organizationId-environments-environmentId-domains-domain-users-use. operations: - method: POST name: unlockuser description: Unlock a user call: am-user.unlockuser with: organizationId: rest.organizationId environmentId: rest.environmentId domain: rest.domain user: rest.user outputParameters: - type: object mapping: $. - path: /v1/organizations/{organizationid}/environments/{environmentid}/domains/{domain}/users/{user}/username name: organizations-organizationid-environments-environmentid-domains-domain-users-use description: REST surface for organizations-organizationId-environments-environmentId-domains-domain-users-use. operations: - method: PATCH name: updateusername description: Update a user username call: am-user.updateusername with: organizationId: rest.organizationId environmentId: rest.environmentId domain: rest.domain user: rest.user body: rest.body outputParameters: - type: object mapping: $. - path: /v1/organizations/{organizationid}/users name: organizations-organizationid-users description: REST surface for organizations-organizationId-users. operations: - method: GET name: listorganisationusers description: List users of the organization call: am-user.listorganisationusers with: organizationId: rest.organizationId q: rest.q filter: rest.filter page: rest.page size: rest.size outputParameters: - type: object mapping: $. - method: POST name: createorganisationuser description: Create a platform user or Service Account call: am-user.createorganisationuser with: organizationId: rest.organizationId body: rest.body outputParameters: - type: object mapping: $. - path: /v1/organizations/{organizationid}/users/bulk name: organizations-organizationid-users-bulk description: REST surface for organizations-organizationId-users-bulk. operations: - method: POST name: bulkorganisationuseroperation description: Create/update/delete platform users or Service Accounts call: am-user.bulkorganisationuseroperation with: organizationId: rest.organizationId body: rest.body outputParameters: - type: object mapping: $. - path: /v1/organizations/{organizationid}/users/{user} name: organizations-organizationid-users-user description: REST surface for organizations-organizationId-users-user. operations: - method: GET name: getorganizationuser description: Get a user call: am-user.getorganizationuser with: organizationId: rest.organizationId user: rest.user outputParameters: - type: object mapping: $. - method: PUT name: updateorganizationuser description: Update a user call: am-user.updateorganizationuser with: organizationId: rest.organizationId user: rest.user body: rest.body outputParameters: - type: object mapping: $. - method: DELETE name: deleteorganizationuser description: Delete a user call: am-user.deleteorganizationuser with: organizationId: rest.organizationId user: rest.user outputParameters: - type: object mapping: $. - path: /v1/organizations/{organizationid}/users/{user}/resetpassword name: organizations-organizationid-users-user-resetpassword description: REST surface for organizations-organizationId-users-user-resetPassword. operations: - method: POST name: resetorganizationuserpassword description: Reset password call: am-user.resetorganizationuserpassword with: organizationId: rest.organizationId user: rest.user body: rest.body outputParameters: - type: object mapping: $. - path: /v1/organizations/{organizationid}/users/{user}/status name: organizations-organizationid-users-user-status description: REST surface for organizations-organizationId-users-user-status. operations: - method: PUT name: updateorganizationuserstatus description: Update a user status call: am-user.updateorganizationuserstatus with: organizationId: rest.organizationId user: rest.user body: rest.body outputParameters: - type: object mapping: $. - path: /v1/organizations/{organizationid}/users/{user}/tokens name: organizations-organizationid-users-user-tokens description: REST surface for organizations-organizationId-users-user-tokens. operations: - method: GET name: getorganizationusertokens description: Get tokens of a user call: am-user.getorganizationusertokens with: organizationId: rest.organizationId user: rest.user outputParameters: - type: object mapping: $. - method: POST name: createaccountaccesstoken description: Generate an account access token for a user call: am-user.createaccountaccesstoken with: organizationId: rest.organizationId user: rest.user body: rest.body outputParameters: - type: object mapping: $. - path: /v1/organizations/{organizationid}/users/{user}/tokens/{tokenid} name: organizations-organizationid-users-user-tokens-tokenid description: REST surface for organizations-organizationId-users-user-tokens-tokenId. operations: - method: DELETE name: revokeaccountaccesstoken description: Revoke an account access token call: am-user.revokeaccountaccesstoken with: organizationId: rest.organizationId user: rest.user tokenId: rest.tokenId outputParameters: - type: object mapping: $. - path: /v1/organizations/{organizationid}/users/{user}/username name: organizations-organizationid-users-user-username description: REST surface for organizations-organizationId-users-user-username. operations: - method: PATCH name: updateorganisationusername description: Update a user username call: am-user.updateorganisationusername with: organizationId: rest.organizationId user: rest.user body: rest.body outputParameters: - type: object mapping: $. - path: /v1/user name: user description: REST surface for user. operations: - method: GET name: getcurrentuser description: Get the current user call: am-user.getcurrentuser outputParameters: - type: object mapping: $. - path: /v1/user/newsletter/subscribe name: user-newsletter-subscribe description: REST surface for user-newsletter-_subscribe. operations: - method: POST name: subscribenewsletter description: Subscribe to the newsletter the authenticated user call: am-user.subscribenewsletter with: body: rest.body outputParameters: - type: object mapping: $. - path: /v1/user/newsletter/taglines name: user-newsletter-taglines description: REST surface for user-newsletter-taglines. operations: - method: GET name: gettaglines description: Get taglines to display in the newsletter call: am-user.gettaglines outputParameters: - type: object mapping: $. - path: /v1/user/notifications name: user-notifications description: REST surface for user-notifications. operations: - method: GET name: listnotifications description: List notifications received by the current user call: am-user.listnotifications outputParameters: - type: object mapping: $. - path: /v1/user/notifications/{notificationid}/acknowledge name: user-notifications-notificationid-acknowledge description: REST surface for user-notifications-notificationId-acknowledge. operations: - method: POST name: marknotificationasread description: Mark User notification as read call: am-user.marknotificationasread with: notificationId: rest.notificationId outputParameters: - type: object mapping: $. - type: mcp namespace: am-user-mcp port: 9090 transport: http description: MCP adapter for Gravitee.io - Access Management API — user. One tool per consumed operation, routed inline through this capability's consumes block. tools: - name: list-users-security-domain description: List users for a security domain hints: readOnly: true destructive: false idempotent: true call: am-user.listusers with: organizationId: tools.organizationId environmentId: tools.environmentId domain: tools.domain q: tools.q filter: tools.filter page: tools.page size: tools.size outputParameters: - type: object mapping: $. - name: create-user-specified-security-domain description: Create a user on the specified security domain hints: readOnly: false destructive: false idempotent: false call: am-user.createuser with: organizationId: tools.organizationId environmentId: tools.environmentId domain: tools.domain body: tools.body outputParameters: - type: object mapping: $. - name: create-update-delete-multiple-users description: Create/update/delete multiple users on the specified security domain hints: readOnly: false destructive: false idempotent: false call: am-user.bulkuseroperation with: organizationId: tools.organizationId environmentId: tools.environmentId domain: tools.domain body: tools.body outputParameters: - type: object mapping: $. - name: get-user description: Get a user hints: readOnly: true destructive: false idempotent: true call: am-user.finduser with: organizationId: tools.organizationId environmentId: tools.environmentId domain: tools.domain user: tools.user outputParameters: - type: object mapping: $. - name: update-user description: Update a user hints: readOnly: false destructive: false idempotent: true call: am-user.updateuser with: organizationId: tools.organizationId environmentId: tools.environmentId domain: tools.domain user: tools.user body: tools.body outputParameters: - type: object mapping: $. - name: delete-user description: Delete a user hints: readOnly: false destructive: true idempotent: true call: am-user.deleteuser with: organizationId: tools.organizationId environmentId: tools.environmentId domain: tools.domain user: tools.user outputParameters: - type: object mapping: $. - name: get-user-audit-logs description: Get a user audit logs hints: readOnly: true destructive: false idempotent: true call: am-user.listuserauditlogs with: organizationId: tools.organizationId environmentId: tools.environmentId domain: tools.domain user: tools.user type: tools.type status: tools.status from: tools.from to: tools.to size: tools.size page: tools.page outputParameters: - type: object mapping: $. - name: get-user-audit-log description: Get a user audit log hints: readOnly: true destructive: false idempotent: true call: am-user.getuserauditlog with: organizationId: tools.organizationId environmentId: tools.environmentId domain: tools.domain user: tools.user audit: tools.audit outputParameters: - type: object mapping: $. - name: get-user-certificate-credentials description: Get user certificate credentials hints: readOnly: true destructive: false idempotent: true call: am-user.listusercertificatecredentials with: organizationId: tools.organizationId environmentId: tools.environmentId domain: tools.domain user: tools.user outputParameters: - type: object mapping: $. - name: enroll-certificate-credential-user description: Enroll a certificate credential for a user hints: readOnly: false destructive: false idempotent: false call: am-user.enrollusercertificatecredential with: organizationId: tools.organizationId environmentId: tools.environmentId domain: tools.domain user: tools.user body: tools.body outputParameters: - type: object mapping: $. - name: get-user-certificate-credential description: Get a user certificate credential hints: readOnly: true destructive: false idempotent: true call: am-user.getusercertificatecredential with: organizationId: tools.organizationId environmentId: tools.environmentId domain: tools.domain user: tools.user credential: tools.credential outputParameters: - type: object mapping: $. - name: revoke-user-certificate-credential description: Revoke a user certificate credential hints: readOnly: false destructive: true idempotent: true call: am-user.revokeusercertificatecredential with: organizationId: tools.organizationId environmentId: tools.environmentId domain: tools.domain user: tools.user credential: tools.credential outputParameters: - type: object mapping: $. - name: get-user-consents description: Get a user consents hints: readOnly: true destructive: false idempotent: true call: am-user.listuserconsents with: organizationId: tools.organizationId environmentId: tools.environmentId domain: tools.domain user: tools.user clientId: tools.clientId outputParameters: - type: object mapping: $. - name: revoke-user-consents description: Revoke user consents hints: readOnly: false destructive: true idempotent: true call: am-user.revokeuserconsents with: organizationId: tools.organizationId environmentId: tools.environmentId domain: tools.domain user: tools.user clientId: tools.clientId outputParameters: - type: object mapping: $. - name: get-user-consent description: Get a user consent hints: readOnly: true destructive: false idempotent: true call: am-user.getuserconsent with: organizationId: tools.organizationId environmentId: tools.environmentId domain: tools.domain user: tools.user consent: tools.consent outputParameters: - type: object mapping: $. - name: revoke-user-consent description: Revoke a user consent hints: readOnly: false destructive: true idempotent: true call: am-user.revokeuserconsent with: organizationId: tools.organizationId environmentId: tools.environmentId domain: tools.domain user: tools.user consent: tools.consent outputParameters: - type: object mapping: $. - name: get-user-credentials description: Get a user credentials hints: readOnly: true destructive: false idempotent: true call: am-user.listusercredentials with: organizationId: tools.organizationId environmentId: tools.environmentId domain: tools.domain user: tools.user outputParameters: - type: object mapping: $. - name: get-user-credential description: Get a user credential hints: readOnly: true destructive: false idempotent: true call: am-user.getusercredential with: organizationId: tools.organizationId environmentId: tools.environmentId domain: tools.domain user: tools.user credential: tools.credential outputParameters: - type: object mapping: $. - name: revoke-user-credential description: Revoke a user credential hints: readOnly: false destructive: true idempotent: true call: am-user.revokeusercredential with: organizationId: tools.organizationId environmentId: tools.environmentId domain: tools.domain user: tools.user credential: tools.credential outputParameters: - type: object mapping: $. - name: list-users-security-domain-2 description: List users for a security domain hints: readOnly: true destructive: false idempotent: true call: am-user.listuserdevices with: organizationId: tools.organizationId environmentId: tools.environmentId domain: tools.domain user: tools.user outputParameters: - type: object mapping: $. - name: delete-device description: Delete a device hints: readOnly: false destructive: true idempotent: true call: am-user.deleteuserdevice with: organizationId: tools.organizationId environmentId: tools.environmentId domain: tools.domain user: tools.user device: tools.device outputParameters: - type: object mapping: $. - name: get-user-enrolled-factors description: Get a user enrolled factors hints: readOnly: true destructive: false idempotent: true call: am-user.listuserenrolledfactors with: organizationId: tools.organizationId environmentId: tools.environmentId domain: tools.domain user: tools.user outputParameters: - type: object mapping: $. - name: revoke-user-factor description: Revoke user factor hints: readOnly: false destructive: true idempotent: true call: am-user.deleteuserfactor with: organizationId: tools.organizationId environmentId: tools.environmentId domain: tools.domain user: tools.user factor: tools.factor outputParameters: - type: object mapping: $. - name: get-user-linked-identities description: Get a user linked identities hints: readOnly: true destructive: false idempotent: true call: am-user.listuseridentities with: organizationId: tools.organizationId environmentId: tools.environmentId domain: tools.domain user: tools.user outputParameters: - type: object mapping: $. - name: unlink-user-identity description: Unlink user identity hints: readOnly: false destructive: true idempotent: true call: am-user.unlinkuseridentity with: organizationId: tools.organizationId environmentId: tools.environmentId domain: tools.domain user: tools.user identity: tools.identity outputParameters: - type: object mapping: $. - name: lock-user description: Lock a user hints: readOnly: false destructive: false idempotent: false call: am-user.lockuser with: organizationId: tools.organizationId environmentId: tools.environmentId domain: tools.domain user: tools.user outputParameters: - type: object mapping: $. - name: reset-password description: Reset password hints: readOnly: false destructive: false idempotent: false call: am-user.resetpassword with: organizationId: tools.organizationId environmentId: tools.environmentId domain: tools.domain user: tools.user body: tools.body outputParameters: - type: object mapping: $. - name: get-user-roles description: Get a user roles hints: readOnly: true destructive: false idempotent: true call: am-user.listuserroles with: organizationId: tools.organizationId environmentId: tools.environmentId domain: tools.domain user: tools.user dynamic: tools.dynamic outputParameters: - type: object mapping: $. - name: assign-roles-user description: Assign roles to a user hints: readOnly: false destructive: false idempotent: false call: am-user.assignrolestouser with: organizationId: tools.organizationId environmentId: tools.environmentId domain: tools.domain user: tools.user body: tools.body outputParameters: - type: object mapping: $. - name: revoke-role-user description: Revoke role to a user hints: readOnly: false destructive: true idempotent: true call: am-user.revokeuserrole with: organizationId: tools.organizationId environmentId: tools.environmentId domain: tools.domain user: tools.user role: tools.role outputParameters: - type: object mapping: $. - name: send-registration-confirmation-email description: Send registration confirmation email hints: readOnly: false destructive: false idempotent: false call: am-user.sendregistrationconfirmation with: organizationId: tools.organizationId environmentId: tools.environmentId domain: tools.domain user: tools.user outputParameters: - type: object mapping: $. - name: update-user-status description: Update a user status hints: readOnly: false destructive: false idempotent: true call: am-user.updateuserstatus with: organizationId: tools.organizationId environmentId: tools.environmentId domain: tools.domain user: tools.user body: tools.body outputParameters: - type: object mapping: $. - name: unlock-user description: Unlock a user hints: readOnly: false destructive: false idempotent: false call: am-user.unlockuser with: organizationId: tools.organizationId environmentId: tools.environmentId domain: tools.domain user: tools.user outputParameters: - type: object mapping: $. - name: update-user-username description: Update a user username hints: readOnly: false destructive: false idempotent: true call: am-user.updateusername with: organizationId: tools.organizationId environmentId: tools.environmentId domain: tools.domain user: tools.user body: tools.body outputParameters: - type: object mapping: $. - name: list-users-organization description: List users of the organization hints: readOnly: true destructive: false idempotent: true call: am-user.listorganisationusers with: organizationId: tools.organizationId q: tools.q filter: tools.filter page: tools.page size: tools.size outputParameters: - type: object mapping: $. - name: create-platform-user-service-account description: Create a platform user or Service Account hints: readOnly: false destructive: false idempotent: false call: am-user.createorganisationuser with: organizationId: tools.organizationId body: tools.body outputParameters: - type: object mapping: $. - name: create-update-delete-platform-users description: Create/update/delete platform users or Service Accounts hints: readOnly: false destructive: false idempotent: false call: am-user.bulkorganisationuseroperation with: organizationId: tools.organizationId body: tools.body outputParameters: - type: object mapping: $. - name: get-user-2 description: Get a user hints: readOnly: true destructive: false idempotent: true call: am-user.getorganizationuser with: organizationId: tools.organizationId user: tools.user outputParameters: - type: object mapping: $. - name: update-user-2 description: Update a user hints: readOnly: false destructive: false idempotent: true call: am-user.updateorganizationuser with: organizationId: tools.organizationId user: tools.user body: tools.body outputParameters: - type: object mapping: $. - name: delete-user-2 description: Delete a user hints: readOnly: false destructive: true idempotent: true call: am-user.deleteorganizationuser with: organizationId: tools.organizationId user: tools.user outputParameters: - type: object mapping: $. - name: reset-password-2 description: Reset password hints: readOnly: false destructive: false idempotent: false call: am-user.resetorganizationuserpassword with: organizationId: tools.organizationId user: tools.user body: tools.body outputParameters: - type: object mapping: $. - name: update-user-status-2 description: Update a user status hints: readOnly: false destructive: false idempotent: true call: am-user.updateorganizationuserstatus with: organizationId: tools.organizationId user: tools.user body: tools.body outputParameters: - type: object mapping: $. - name: get-tokens-user description: Get tokens of a user hints: readOnly: true destructive: false idempotent: true call: am-user.getorganizationusertokens with: organizationId: tools.organizationId user: tools.user outputParameters: - type: object mapping: $. - name: generate-account-access-token-user description: Generate an account access token for a user hints: readOnly: false destructive: false idempotent: false call: am-user.createaccountaccesstoken with: organizationId: tools.organizationId user: tools.user body: tools.body outputParameters: - type: object mapping: $. - name: revoke-account-access-token description: Revoke an account access token hints: readOnly: false destructive: true idempotent: true call: am-user.revokeaccountaccesstoken with: organizationId: tools.organizationId user: tools.user tokenId: tools.tokenId outputParameters: - type: object mapping: $. - name: update-user-username-2 description: Update a user username hints: readOnly: false destructive: false idempotent: true call: am-user.updateorganisationusername with: organizationId: tools.organizationId user: tools.user body: tools.body outputParameters: - type: object mapping: $. - name: get-current-user description: Get the current user hints: readOnly: true destructive: false idempotent: true call: am-user.getcurrentuser outputParameters: - type: object mapping: $. - name: subscribe-newsletter-authenticated-user description: Subscribe to the newsletter the authenticated user hints: readOnly: false destructive: false idempotent: false call: am-user.subscribenewsletter with: body: tools.body outputParameters: - type: object mapping: $. - name: get-taglines-display-newsletter description: Get taglines to display in the newsletter hints: readOnly: true destructive: false idempotent: true call: am-user.gettaglines outputParameters: - type: object mapping: $. - name: list-notifications-received-current-user description: List notifications received by the current user hints: readOnly: true destructive: false idempotent: true call: am-user.listnotifications outputParameters: - type: object mapping: $. - name: mark-user-notification-read description: Mark User notification as read hints: readOnly: false destructive: false idempotent: false call: am-user.marknotificationasread with: notificationId: tools.notificationId outputParameters: - type: object mapping: $.