V2 · Account

Users

Read the users that belong to a given enterprise.

A user is a person who can sign in to FinDesk. The V2 user endpoints are scoped to an enterprise via X-Enterprise-Id and are read-only.

Attributes
List users
- Request headers
- Responses
Retrieve a user
- Responses

Attributes

The shape returned by App\Http\Resources\V2\UserResource::toArray():

Attribute	Type	Description
`id`	string (UUID)	Stable public identifier.
`name`	string	User display name.
`email`	string	User email address.
`is_active`	boolean	True when the `active` column equals `1`.
`created_at`	string (ISO 8601)	Record creation timestamp.
`updated_at`	string (ISO 8601)	Record updated timestamp.

List users

GET /api/v2/users

Returns all users that belong to the enterprise identified by X-Enterprise-Id (via $team->allUsers()). This endpoint is not paginated.

Request headers

Header	Required	Description
`Authorization`	Yes	`Bearer {token}`.
`Accept`	Yes	`application/json`.
`X-Enterprise-Id`	Yes	Enterprise UUID.

Responses

200 — UsersResource collection envelope.
403 Forbidden — caller is not a member of the enterprise.

Retrieve a user

GET /api/v2/users/{user:uuid}

Responses

200 — single UserResource envelope.
403 Forbidden — caller is not a member of the enterprise, or the resolved user does not belong to that enterprise (checked via $team->hasUser($user)).

V2 differences — Read-only resource; App\Http\Middleware\NormalizeApiInput is a no-op here. See Auth for the canonical normaliser description.

GET /api/v2/users

{
    "headers": {
        "Authorization": "Bearer {token}",
        "Accept": "application/json",
        "X-Enterprise-Id": "{enterprise_uuid}"
    }
}

list_response

{
    "data": [
        {
            "id": "0aa55b66-7c88-49d0-b1e2-f3a4b5c6d7e8",
            "name": "Olivia Chen",
            "email": "olivia@acmefinance.com.au",
            "is_active": true,
            "created_at": "2024-01-04T01:22:33.000000Z",
            "updated_at": "2026-04-09T03:21:55.000000Z"
        }
    ]
}

GET /api/v2/users/{user_uuid}

{
    "headers": {
        "Authorization": "Bearer {token}",
        "Accept": "application/json",
        "X-Enterprise-Id": "{enterprise_uuid}"
    }
}

show_response

{
    "data": {
        "id": "0aa55b66-7c88-49d0-b1e2-f3a4b5c6d7e8",
        "name": "Olivia Chen",
        "email": "olivia@acmefinance.com.au",
        "is_active": true,
        "created_at": "2024-01-04T01:22:33.000000Z",
        "updated_at": "2026-04-09T03:21:55.000000Z"
    }
}