Users

User account management (admin and self-service)

📄️List all users

Requires role `admin`.

📄️Create a local user

Requires role `admin`.

📄️Get a user

Allowed for the user themselves, or an admin.

📄️Update a user's profile or password

Allowed for the user themselves, or an admin. Password change (`old_password`/`new_password`) is only permitted for local-provider accounts.

📄️Delete a user

Requires role `admin`. Cascades to the user's memberships, challenges, MFA devices, and created invites, and revokes all their sessions.

📄️Get a user's usage stats

Allowed for the user themselves, or an admin.