GET /users/:id
Path Parameters
Response
Example
type (human or service) and status (active or retired) appear on every user object — see
Service Accounts for what a service account is and what retired means for
one.Identifier
Theid parameter accepts a UUID, alias, or me.
Permissions
Any authenticated caller can retrieve any user’s full record — there is no self/other distinction and no field redaction on this endpoint. The only thing that changes with the caller isrole, which is injected
onto the response and is never a stored attribute of the account itself:
Read access is unrestricted; write access is not — Update User is still
self-only (or owner-only, for a service account).

