Management users
All routes require an authorized admin-console access token.
| Method | Route | Purpose |
|---|---|---|
| GET | /api/v1/management/users | List users using pagination query fields. |
| GET | /api/v1/management/users/{id} | Read one user. |
| POST | /api/v1/management/users | Create a user. |
| PUT | /api/v1/management/users/{id} | Update a user. |
| DELETE | /api/v1/management/users/{id} | Delete a user. |
Roles and direct access
/api/v1/management/users/{id}/roles and /access support GET, POST, and DELETE. Role relationships provide inherited access; direct access relationships provide explicit object/type grants. Use the management and RBAC reference to discover valid object and relation metadata.
User deletion is destructive and may invalidate sessions, credentials, profiles, grants, and directory assignments. Require explicit operator confirmation in administrative clients.