Retrieves a specific user by ID.
Looks up a single workspace member by their tenant user id. The id matches the `name` field returned by `GET /users`. Returns 404 if the user is not a member of the caller's workspace — this endpoint does not cross tenant boundaries. Use `PATCH /users/{user}` to mutate role or profile fields (admin-only).
Authorization
Bearer JWT Authorization header using the Bearer scheme. Enter 'Bearer' [space] and then your token.
In: header
Path Parameters
The unique identifier of the user.
The tenant identifier
Response Body
curl -X GET "https://api.fruxon.com/v1/tenants/string/users/string"{
"id": "string",
"username": "string",
"email": "string",
"firstName": "string",
"lastName": "string",
"avatarFileId": "string",
"status": "INVITED",
"role": "ADMIN",
"effectiveScopes": [
"string"
],
"canCreateWorkspace": false,
"canChooseCell": false,
"solutionPartners": [
{
"id": "00000000-0000-0000-0000-000000000000",
"displayName": "string",
"role": "ADMIN",
"status": "APPLIED",
"canProvision": false
}
],
"createdAt": 0,
"modifiedAt": 0
}{
"type": "string",
"title": "string",
"status": 0,
"detail": "string",
"instance": "string",
"property1": null,
"property2": null
}Removes a member and immediately revokes their tenant access.
Removes the membership, personal API keys, and per-agent grants in one transaction. If the member was the sole explicit Admin on an agent, the acting Admin/Owner is assigned first. Owners can only be removed by another Owner, and the final Owner cannot be removed.
Invites a user to join the current tenant.
Creates an outstanding invitation for the given email and sends an invitation email with an accept link. If an invitation already exists for this email in the current tenant it is replaced. If the email is already an active member, returns 400.