shared-users
Get User
Get a specific user by ID.
Open to all staff roles. User is loaded org-scoped via load_user — a
cross-org request returns 404.
GET
Get User
Authorizations
Bearer authentication header of the form Bearer <token>, where <token> is your auth token.
Path Parameters
Response
Successful Response
User info for admin view — hides technical fields.
role is the cached WorkOS membership role, used purely to render the
crew table. Never read it for authorization.
Previous
Update User RoleUpdate another user's WorkOS membership role.
Two-phase write: the WorkOS membership is updated first (authoritative
source). On success, the local `users.role` display cache is mirrored.
On DB-mirror failure, structured logs flag the drift; the hourly
reconciliation worker will heal it on its next run.
Next
Get User